CVE-2008-0813

The CVE-2008-0813 entry concerns a directory traversal vulnerability in XPWeb’s Download.php, affecting XPWeb versions 3.0.1, 3.3.2 (and possibly others). An attacker can read arbitrary files by supplying a ".." sequence in the URL parameter, enabling unauthorized file disclosure. The vulnerabili...