Directory traversal

Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter...

CVE-2007-4008

CVE-2007-4008 describes a directory traversal vulnerability in the Entertainment Media Sharing CMS, affecting the custom.php component. The root cause is improper handling of the pagename parameter, enabling remote attackers to traverse directories using .. and include/execute local files. This l...

CVE-2007-4008

Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter...