CVE-2009-1246

CVE-2009-1246 describes multiple directory traversal vulnerabilities in Blogplus 1.0. The issue allows remote attackers to include and execute arbitrary local files by injecting a .. sequence into six parameters across various PHP includes (block_center_down.php, block_center_top.php, block_left....