CVE-2007-4805

Name of the Vulnerable Software and Affected Versions: fuzzylime (cms) versions 3.0 and earlier

Description: The issue allows remote attackers to include arbitrary local files via a .. (dot dot) in the p parameter in the getgalldata.php file.

Recommendations: For versions 3.0 and earlier, consider restricting access to the getgalldata.php file until a patch is available. As a temporary workaround, avoid using the p parameter in the affected API endpoint until the issue is resolved.