Directory traversal

Directory traversal vulnerability in templater.php in the ZZTemplater module in TinyCMS 1.1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the configtemplate parameter...

CVE-2008-4740

CVE-2008-4740 affects TinyCMS 1.1.2 with the ZZ_Templater module, specifically templater.php. The vulnerability is a directory traversal that, when register_globals is enabled and magic_quotes_gpc is disabled, allows a remote attacker to include and execute arbitrary local files by manipulating c...