CVE-2009-3508

MUJE CMS 1.0.4.34 is affected by multiple directory traversal vulnerabilities. Remote attackers can try to include and execute arbitrary local files via a .. in the _class parameter to admin.php and the url parameter to install/install.php; and remote authenticated administrators can read arbitra...