CVE-2008-4759

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

CVE-2008-4759

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

CVE-2008-4759

CVE-2008-4759 is a directory traversal vulnerability affecting BuzzyWall 1.3.1. The flaw occurs in download.php where the id parameter can be manipulated with .. to read arbitrary local files. This is a remote issue with a network attack vector and partial confidentiality impact, as described in ...