CVE-2008-0091

CVE-2008-0091 concerns a directory traversal in download2.php of AGENCY4NET WEBFTP 1 . The flaw allows remote attackers to read and delete arbitrary files by supplying a ".." in the file parameter. According to NVD, the vulnerability has a CVSS v2 base score of 6.4 (MEDIUM) with network access, l...