CVE-2006-5618: Undefined Security Weakness

Directory traversal vulnerability in script/catforaff.php in Netref 4 allows remote attackers to read arbitrary files via a .. dot dot sequence in the addirect parameter...