CVE-2009-4672

CVE-2009-4672 : A Local File Inclusion vulnerability in WP-Lytebox 1.3 for WordPress is caused by improper filtering of the pg parameter in main.php, enabling remote attackers to include and potentially execute arbitrary local PHP files. Affected product: WP-Lytebox WordPress plugin (version 1.3)...