Security Advisory
CVE-2008-3405
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action_file parameter.