CVE-2007-1633

The vulnerability CVE-2007-1633 affects the bbcode_ref.php component of Giorgio Ciranni’s Splatt Forum 4.0 RC1 module for PHP-Nuke. The issue is a directory traversal flaw that allows remote attackers to include and execute arbitrary local files by supplying a .. in the name parameter, demonstrat...