CVE-2008-5819

CVE-2008-5819 describes a directory traversal flaw in the eDreamers eDNews 2 package, specifically in the file eDNews_archive.php. The vulnerability occurs when magic_quotes_gpc is disabled and allows remote attackers to include and execute arbitrary local files by abusing a .. (dot dot) in the l...