CVE-2007-2960

CVE-2007-2960 : Concrete details show multiple PHP remote file inclusion vulnerabilities in Scallywag (2005-04-25) where an attacker can include and execute arbitrary local PHP code via a URL in the path parameter to template.php for skin/dark/, skin/gold/, or skin/original/. The underlying cause...

CVE-2007-2960: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skinname parameter to template.php in 1 skin/dark/, 2 skin/gold/, or 3 skin/original/, a different vector than CVE-2007-2900. NOTE: the...