CVE-2008-7090

CVE-2008-7090 affects Pligg 9.9 and earlier. Two directory traversal flaws allow remote attackers to (1) check existence of arbitrary files via .. in trackback.php ($tb_url) and (2) include arbitrary files via .. in the template parameter to settemplate.php. Impact per sources: potential file dis...