CVE-2009-2923

The CVE-2009-2923 entry concerns BitmixSoft PHP-Lance 1.52 with two directory-traversal flaws. The vulnerability allows remote attackers to read arbitrary files by injecting a .. payload in (1) the language parameter to show.php and (2) in the parameter to advanced_search.php. Affected software i...