CVE-2008-0156

CVE-2008-0156: Absolute path traversal in Million Dollar Script 2.0.14 (index.php) lets remote attackers read arbitrary files via encoded '/' sequences in the link parameter. Affected: Million Dollar Script 2.0.14; root cause: improper handling of encoded path separators. Impact: read access to a...