CVE-2011-0505

Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the settemplatevalue parameter...

CVE-2011-0505

CVE-2011-0505 affects Zwii 2.1.1, specifically the directory traversal flaw in system/system.php. The root cause is that when magic_quotes_gpc is disabled and register_globals is enabled, an attacker can manipulate the set[template][value] parameter to include and execute arbitrary local files. T...