CVE-2008-1324-漏洞详情

[原文]Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1325.

[CNNVD]Travelsized CMS ‘index.php’ 多个目录遍历漏洞(CNNVD-200803-219)

        Travelsized CMS中的index.php存在多个目录遍历漏洞。远程攻击者通过(1) page_id 与 (2) 语言参数（该参数中包含..）包含和执行任意本地文件。