CVE-2004-2127

CVE-2004-2127 concerns a directory traversal in Web Blog 1.1 that allows remote attackers to read arbitrary files via a .. in the file variable. The affected component is the Web Blog 1.1 application; root cause is improper handling of the file parameter enabling traversal to parent directories. ...

CVE-2004-2127

Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the file variable...