CVE-2008-5965

The vulnerability CVE-2008-5965 affects LokiCMS 0.3.4 and earlier. A directory traversal flaw exists in index.php that, when magic_quotes_gpc is disabled, allows remote attackers to probe for the existence of arbitrary files by injecting .. into the page parameter. The NVD entry documents a MEDIU...