CVE-2008-3385

CVE-2008-3385 affects php Help Agent 1.0 and 1.1 Full. A directory traversal flaw in include/head_chat.inc.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the content parameter; in some environments this can enable remote file inclusion via UNC paths ...