CVE-2009-1502 Information

Description

Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.

Reference

http://secunia.com/advisories/34940 http://www.securityfocus.com/bid/34771 https://www.exploit-db.com/exploits/8566