CVE-2007-1850

CVE-2007-1850 concerns Drake CMS. A directory traversal vulnerability exists in the file path components/classes/captcha/captcha.jpg.php, exploitable via the d_private parameter with a .. sequence to read arbitrary files, list directories, and reveal the installation path. Reported effects includ...