CVE-2007-1487

Directory traversal in Sascha Schroeder (CyberT Teddy) WebLog: index.php showsArticles action vulnerable to reading arbitrary files via .. in the file parameter. Root cause is improper input handling allowing path traversal. Impact stated as read access to arbitrary files; no exploit specifics or...