CVE-2007-6290

SERWeb 2.0.0 dev1 and earlier are affected by directory traversal in js/get_js.php. The vulnerability allows remote attackers to read arbitrary files by supplying .. in the (1) mod and (2) js parameters, due to underlying path traversal. Documented impact is reading files; no exploitation status ...