EUVD-2008-5788

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5818: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...