Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbitrary files and execute arbitrary PHP files via .. (dot dot) sequences in the lng parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Korweblog | Korweblog | 1.6.1 (including) | 1.6.1 (including) |
| Korweblog | Korweblog | 1.6.2cvs (including) | 1.6.2cvs (including) |