CVE-2001-1019: Undefined Security Weakness

Directory traversal vulnerability in viewitem CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTMLFILE parameter...