CVE-2008-1908

CVE-2008-1908 affects cpCommerce 1.1.0 with multiple directory traversal vulnerabilities. The flaws allow remote attackers to include and execute arbitrary local files via a .. in (1) the language parameter used by a language action to the default URI (not properly handled in actions/language.act...