CVE-2008-7176

CVE-2008-7176 affects Facil CMS 0.1RC and involves multiple directory traversal weaknesses that allow remote attackers to read arbitrary files via .. in the index.php change_lang parameter or the modules.php modload parameter. The NVD entry records this as a CVSS v2 base score of 6.8 ( MEDIUM ), ...