CVE-2006-6392

The CVE-2006-6392 entry describes a directory traversal vulnerability in index.php of plx Web Studio (aka plxWebDev) plx Pay 3.2 and earlier. A remote attacker can use a .. in the read parameter to include and execute arbitrary local files and to access user credentials and other sensitive inform...