CVE-2009-1405

CVE-2009-1405 : Affected software is PastelCMS 0.8.0. The vulnerability is a directory traversal in index.php allowing remote inclusion/execution of local files via a ".." in the set_lng parameter when magic_quotes_gpc is disabled. This is the core impact described in the connected documents. The...