CVE-2007-4369

SOTEeSKLEP (before 4.0) contains a directory traversal flaw in the go/_files component. The vulnerability allows remote attackers to read arbitrary files by supplying a \.. (dot dot) in the file parameter. This originates from inadequate validation of path traversal in the affected module, leadin...