CVE-2012-1671

Name of the Vulnerable Software and Affected Versions phpPaleo versions 4.8b155 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter of the index.php file. This is a directory traversal vulnerability.

Recommendations For phpPaleo versions 4.8b155 and earlier, consider restricting access to the index.php file or the lang parameter to minimize the risk of exploitation until a patch is available. Avoid using the lang parameter with untrusted input.