CVE-2008-7254

CVE-2008-7254 affects Irmin CMS (formerly Pepsi CMS) versions 0.5 and 0.6 BETA2. The vulnerability is a directory traversal in includes/template-loader.php that allows an attacker to include and execute arbitrary files via a .. in the _Root_Path parameter when register_globals is enabled. The NVD...