CVE-2005-1298

CVE-2005-1298 describes a vulnerability in the inserter.cgi script where remote attackers can read arbitrary files by passing a full pathname as the argument. The NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and LOW complexity, but the provided documents do not specify af...