CVE-2008-5883

CVE-2008-5883 describes an absolute path traversal in mini-pub (front-end/dir.php) prior to version 0.3, where a full pathname supplied in the sDir parameter allows remote attackers to list arbitrary directories. Documents confirm the affected component and root cause; exploitation details are no...