CVE-2012-0981

Affected software: phpShowtime 2.0. Vulnerability: Directory traversal via a .. in the r parameter to index.php, enabling remote attackers to list arbitrary directories and image files. Root cause: Unvalidated path input allows traversal to read arbitrary files. Impact: Unauthorized access to ser...