PT-2010-4300

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions prior to 1.8.1 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the default cms lang parameter to an admi...