CVE-2009-3216

CVE-2009-3216 describes multiple directory traversal vulnerabilities in iWiccle 1.01 . When magic_quotes_gpc is disabled, remote attackers can read arbitrary files by supplying a .. sequence in either the show parameter of the admin module (accessed via index.php) or the module parameter of index...