CVE-2012-5386

CVE-2012-5386 affects phpPaleo 4.8b180 and earlier, caused by a directory traversal in index.php that allows remote attackers to include and execute arbitrary local files via a .. in the phppaleo4_lang cookie (cookie-based/input parameter manipulation). The issue is explicitly described across mu...