CVE-2009-2338

CVE-2009-2338 affects FreeWebshop.org 2.2.9 R2. The vulnerability is a directory traversal/local file include in includes/startmodules.inc.php that, with register_globals enabled, allows including and executing arbitrary local files via .. in lang_file. OpenVAS entries corroborate a Local File In...