CVE-2004-1543

CVE-2004-1543 describes a directory traversal vulnerability in KorWeblog (viewimg.php) that affects version 1.6.2-cvs and earlier. The root cause is accepting a path parameter containing a “..” sequence, enabling remote attackers to list arbitrary directories. The issue is publicly documented by ...