Lytebox - Local File Inclusion

The wp-lytebox WordPress plugin was affected by a Local File Inclusion security vulnerability...

CVE-2009-4672

Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pg parameter...

WP-Lytebox 'pg' Parameter Local File Inclusion

The remote host is running WP-Lytebox, a plugin for WordPress that uses Lytebox to add a lightbox functionality to HTML content. The version of WP-Lytebox installed on the remote host fails to filter user-supplied input to the 'pg' parameter of the 'main.php' script before using it to include PHP...