CVE-2008-2355

CVE-2008-2355 describes a directory traversal vulnerability in WR-Meeting 1.0. When magic_quotes_gpc is disabled, an attacker can cause the application to include and execute local files by inserting a .. (dot dot) in the msnum parameter of a coment event, exposing partial confidentiality and int...