CVE-2003-1529: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" encoded dot dot in the URL...

CVE-2007-0389: Undefined Security Weakness

Directory traversal vulnerability in ArsDigita Community System ACS 3.4.10 and earlier, and ArsDigita Community Education Solution ACES 1.1, allows remote attackers to read arbitrary files via .%252e/ double-encoded dot dot slash sequences in the URI...