Security Advisory
CVE-2008-7163
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the sine[config][index_main] parameter.