CVE-2011-4713: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ID parameter to 1 catalog/shoppingcart.php or 2 catalog/content.php...

PT-2011-5048

Name of the Vulnerable Software and Affected Versions osCSS2 versions 2.1.0 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the ID parameter to either "catalog/shopping cart.php" or...