CVE-2006-5149

CVE-2006-5149 describes multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2. An attacker can cause local files to be included and executed by supplying a .dot dot (..) payload in either the page parameter to shared/help.php or the tab parameter to shared/header.php. This resul...