CVE-2006-6877

Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier, when registerglobals is enabled, allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...