CVE-2009-2784

Multiple directory traversal vulnerabilities in dit.cms 1.3, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter to index.php in 1 install/, 2 menus/leftrightslideopen/, 3 menus/sidepullout/, 4...