CVE-2009-2109

CVE-2009-2109 affects FretsWeb 1.2. Multiple directory traversal vulnerabilities allow remote attackers to read arbitrary files via the language parameter to charts.php and the fretsweb_language cookie parameter to unspecified vectors, possibly related to admin/common.php. Root cause: improper ha...