CVE-2010-1115: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...

CVE-2006-4746: Undefined Security Weakness

PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...