CVE-2008-4522

CVE-2008-4522 describes multiple directory traversal vulnerabilities in the JMweb MP3 Music Audio Search and Download Script. The issue allows remote attackers to cause inclusion and execution of arbitrary local files by manipulating the src parameter (via ..) in the listen.php and download.php s...