CVE-2007-2008

Name of the Vulnerable Software and Affected Versions pL-PHP beta version 0.9

Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the lang parameter of the admin.php file.

Recommendations For pL-PHP beta version 0.9, consider restricting access to the admin.php file until a patch is available, and avoid using the lang parameter with untrusted input.