CVE-2007-2778

CVE-2007-2778 affects MolyX BOARD 2.5.0 with multiple directory traversal flaws. The vulnerability allows remote attackers to read arbitrary files by supplying a .. (dot dot) path in the lang parameter to index.php and other PHP scripts. The root cause is uncontrolled path traversal in the langua...