CVE-2007-0872

CVE-2007-0872: The Plain Old Webserver (POW) add-on for Mozilla Firefox before 0.0.9 is vulnerable to a directory traversal via .. in the URI, allowing an unauthenticated attacker to read arbitrary files on the host within Firefox’s running user’s permissions. The issue is triggered by unsanitize...