Drupal Template File Selection Local File Inclusion Vulnerability
Description
A vulnerability has been identified in Drupal, which could be exploited by attackers to gain knowledge of sensitive information. This issue is caused by an input validation error in the "drupal/includes/theme.inc" script when processing URL arguments while selecting a template file, which could be exploited by attackers to include or disclose the contents of local files with the privileges of the web server.
Vulnerable Products
Vulnerable Software: Drupal versions prior to 6.10Drupal versions prior to 5.16
