CVE-2008-3390

CVE-2008-3390 describes a directory traversal in Minishowcase Image Gallery (version 09b136) via libraries/general.init.php when register_globals is enabled. An attacker can use a .. in the lang parameter to include and execute local files. The NVD entry assigns a CVSS v2 base score of 6.8 (MEDIU...