Security Advisory
CVE-2012-6652
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pageflipbook_language parameter.