CVE-2010-1082

CVE-2010-1082 describes multiple directory traversal vulnerabilities in OI.Blogs 1.0.0 . When magic_quotes_gpc is disabled, remote attackers can read arbitrary files via directory traversal in (1) the theme parameter to loadStyles.php and (2) the scripts parameter to javascript/loadScripts.php. T...