CVE-2006-6028

CVE-2006-6028 describes a directory traversal in DoSePa 1.0.4 (textview.php) that allows remote attackers to read arbitrary files by manipulating the file parameter with a .. sequence or an absolute path. Affected software: DoSePa 1.0.4, textview.php. Root cause: improper validation of the file p...