Hah, I forgot about that one. That has been around since that plugin came out. I kinda disregarded it because you had to be logged in and pLog wasn't so multi-user back then. <br><br>Good 'ole directory traversals.
<br><br>-Matt<br><br><div><span class="gmail_quote">On 2/22/07, <b class="gmail_sendername">Oscar Renalias</b> <<a href="mailto:oscar@renalias.net">oscar@renalias.net</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<a href="http://www.lifetype.net/blog/lifetype-development-journal/2007/02/22/">http://www.lifetype.net/blog/lifetype-development-journal/2007/02/22/</a><br>critical-security-issues-found-in-the-templateeditor-plugin<br>_______________________________________________
<br>pLog-svn mailing list<br><a href="mailto:pLog-svn@devel.lifetype.net">pLog-svn@devel.lifetype.net</a><br><a href="http://limedaley.com/mailman/listinfo/plog-svn">http://limedaley.com/mailman/listinfo/plog-svn</a><br></blockquote>
</div><br>