CVE-2008-1798

Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the callng parameter...

CVE-2008-1798

The CVE-2008-1798 issue affects Dragoon 0.1, specifically the calendrier.php routine in forum/kietu/libs. An attacker can craft a value for cal[lng] containing a .. sequence to trigger directory traversal, enabling the inclusion and execution of arbitrary local files. This is a server-side file i...