CVE-2006-1791

CVE-2006-1791 affects QuickBlogger 1.4 through the file acc.php , enabling a directory traversal that lets an attacker read or include arbitrary local files via the request parameter; note that an include failure can yield XSS . The connected documents confirm the affected product and vulnerabili...