CVE-2011-3837

Directory traversal vulnerability in blogsystem/datafunctions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the preview parameter to index.php...

CVE-2011-3837

CVE-2011-3837 concerns a directory traversal vulnerability in Wuzly 2.0. The affected component is blog_system/data_functions.php, with the root cause being improper handling of the preview parameter in index.php, allowing remote attackers to read arbitrary files via .. (dot dot). Public referenc...