CVE-2008-7254: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/template-loader.php in Irmin CMS formerly Pepsi CMS 0.5 and 0.6 BETA2, when registerglobals is enabled, allows remote attackers to include and execute arbitrary files via a .. dot dot in the RootPath parameter. NOTE: some of these details are obtained...

pepsicms-rfi.txt

Dear Packetstormsecurity ! I found Vulnerability in Pepsi CMS here is the description ======================================= Pepsi CMS template-loader.php Remote File Include ======================================= ::Home: http://sourceforge.net/projects/pepsicms/ ::Vuln Type : Remote File Inclu...

WordPress v2.1.3 >> remote file include~

by : www.hackeraz.ir userz , saeid... ++++++++++++++++++++++++++++++++++++ WordPress 2.1.3 Remote File Inclusion Affected Software .: WordPress 2.1.3 Download..: http://wordpress-deutschland.org Risk ..............: high Date .........: 25/4/2007 Found by ..........: s433donlylinux Contact...