CVE-2008-6265

CVE-2008-6265 describes a directory traversal vulnerability in the Portfolio module of Cyberfolio (version 7.12.2 and earlier). The flaw resides in the portfolio/css.php component, where an attacker can abuse the theme parameter (using ..) to cause local file inclusion and execute arbitrary local...