Security Advisory
CVE-2002-2128
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.