CVE-2010-1062

CVE-2010-1062 affects Phpkobo Free Real Estate Contact Form 1.09; vulnerable component is codelib/sys/common.inc.php. The root cause is a directory traversal flaw that allows remote inclusion/execution of local files via the LANG_CODE parameter when magic_quotes_gpc is disabled. This is described...