CVE-2009-4723

Netpet CMS <= 1.9 is affected by a directory traversal vulnerability in confirm.php. The issue allows remote attackers to cause local file inclusion and arbitrary code execution by supplying a .. in the language parameter, enabling reading or execution of local files. The OpenVAS entries corro...