CVE-2008-2895

CVE-2008-2895 describes a directory traversal vulnerability in the AproxEngine 5.1.0.4 web interface (index.php). The issue allows an attacker to induce local file inclusion and execution by supplying a .. in the page parameter, due to the underlying path traversal in the PHP code. This vulnerabi...