Directory traversal

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, aka Bug ID CSCto35577...

CVE-2011-0966: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, aka Bug ID CSCto35577...