CVE-2006-7035

The CVE concerns a directory traversal in the Make_thumbnail.php script of the Super Link Exchange Script 1.0. The vulnerability arises from unsafely handling the imgpath parameter, allowing remote attackers to traverse directories (“..” sequences) and read arbitrary files. Affected software: Sup...