CVE-2008-3365

Pixelpost 1.7.1 on Windows is affected by a directory traversal vulnerability in index.php that, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. in the language_full parameter. Root cause is a path traversal in input handling; impact...