CVE-2008-5818

CVE-2008-5818 describes a directory traversal in the PHP file index.php of the eDreamers eDContainer 2.22 application. When magic_quotes_gpc is disabled, a remote attacker can cause arbitrary local file inclusion/execution by supplying a path traversal sequence via the lg parameter (e.g., ..). Th...