CVE-2008-6172

Directory traversal vulnerability in captcha/captchaimage.php in the RWCards comrwcards 3.0.11 component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter...

CVE-2008-6172

Summary of CVE-2008-6172 (Joomla! RWCards 3.0.11) : A directory traversal flaw in captcha/captcha_image.php when magic_quotes_gpc is disabled allows an attacker to include and execute arbitrary local files through the img parameter. The vulnerable component is the RWCards (com_rwcards) 3.0.11 Joo...