CVE-2009-3534

CVE-2009-3534 describes a directory traversal/local file include vulnerability in LionWiki 3.0.3. The issue arises in the index.php or lang parameter handling, where a .. path traversal is possible when magic_quotes_gpc is disabled, allowing remote attackers to read arbitrary files. Connected sou...