CVE-2009-2398

CVE-2009-2398 : Affected software is PHP-Sugar 0.80, vulnerable in test/index.php. The vulnerability is a directory traversal via the t parameter using a ..// sequence, allowing a remote attacker to read arbitrary files. Connected sources corroborate the same description (NVD/NVD mirrors). No exp...