CVE-2008-3851: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

CVE-2008-3194: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in data/inc/themes/predefinedvariables.php in pluck 4.5.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 langpref, 2 file, 3 blogpost, or 4 cat parameter...

Pluck 4.5.1 (blogpost) Local File Inclusion Vulnerability (win only)

Exploit for unknown platform in category web applications ==================================================================== Pluck 4.5.1 blogpost Local File Inclusion Vulnerability win only ==================================================================== AmnPardaz Security Research Team...