CVE-2008-2978

CVE-2008-2978 concerns a directory traversal vulnerability in phpi/rss.php of Ourvideo CMS 9.5 that is exploitable when PHP register_globals is enabled. The issue allows remote attackers to include and execute arbitrary local files by manipulating directory traversal sequences in the prefix param...