CVE-2008-6668

The software nweb2fax version 0.2.7 and earlier is vulnerable to multiple directory traversal (CWE-22) vulnerabilities. Remote attackers can read arbitrary files by using the .. (dot dot) sequence in the id parameter of comm.php and the var_filename parameter of viewrq.php. Successful exploitatio...