CVE-2009-4426

CVE-2009-4426 affects Ignition 1.2 and describes multiple directory traversal vulnerabilities that permit remote attackers to include and execute arbitrary local files via a .. in the blog parameter to (1) comment.php and (2) view.php when magic_quotes_gpc is disabled. This causes arbitrary local...