Heap
18-12-08, 04:02
Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a cms_language cookie.
More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5642)
More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5642)