CVE-2006-2813

CVE-2006-2813 describes a directory traversal vulnerability in the product component easy-scart.cgi of iShopCart . An attacker can exploit a .. (dot dot) sequence in the query string to read arbitrary files. The NVD entry lists a high risk (CVSS v2 base score 7.8) with network access and low comp...