EUVD-2009-1221

Malware in sbrugna...

webEdition CMS 'WE_LANGUAGE' Parameter Local File Include Vulnerability

webEdition CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. webEdition CMS...