CVE-2002-0879

showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via 1 a .. or 2 a C: style pathname in the FILE parameter...

CVE-2002-0879

CVE-2002-0879 affects Gafware CFXImage 1.6.6. The vulnerability arises in showtemp.cfm, allowing remote attackers to read arbitrary files via the FILE parameter using a .. path traversal or a C: style pathname. This is a file read/arbitrary file disclosure issue. The available documents do not pr...