CVE-2008-6167

CVE-2008-6167 is a directory traversal vulnerability in the PHP script search.php for miniPortail 2.2 and earlier. The issue allows remote attackers to include and execute arbitrary local files by manipulating the lng parameter using a .. (dot dot). The NVD entry lists a base score of 7.5 (HIGH) ...