CVE-2007-5782

CVE-2007-5782 affects FireConfig 0.5, where a vulnerability in the dl.php file parameter enables directory traversal via a .. (dot dot) path. The root cause is insufficient validation of the file parameter, allowing an attacker to read arbitrary server files. Documented impact is read access to f...