CVE-2008-4739

Directory traversal vulnerability in index.php in PlugSpace 0.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the navi parameter...

CVE-2008-4739

CVE-2008-4739 affects PlugSpace 0.1 (index.php). The vulnerability is a directory traversal that, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files by injecting a .. (dot dot) in the navi parameter. This is a file path traversal issue leading ...