CVE-2008-2976

Multiple directory traversal vulnerabilities in TinX/cms 1.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 language parameter to a includeme.php, b admin/ajax.php, and c...

CVE-2008-2976

TinX/cms 1.1 is affected by multiple directory traversal vulnerabilities. When register_globals is enabled, remote attackers can cause local file inclusion via directory traversal sequences in the language parameter to include_me.php, admin/ajax.php, and admin/objects/catalog.ajaxhandler.php, and...