CVE-2009-2223

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cwd parameter. NOTE: remote file inclusion attacks may be possible...

CVE-2009-2223

LightOpenCMS 0.1 pre-alpha is affected by a local file inclusion (LFI) in smarty.php, exploitable via a directory traversal in the cwd parameter. An attacker can potentially include and execute arbitrary local files in the webserver context. Public references in connected documents confirm LightO...