CVE-2008-1696

The CVE-2008-1696 entry describes a directory traversal vulnerability in makepost.php of DaZPHPNews 0.1-1. Exploitation requires register_globals enabled and magic_quotes_gpc disabled, allowing an attacker to include and execute arbitrary local files by injecting dots (..) in the prefixdir parame...