CVE-2006-3274

Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \ backslash characters in the URL to certain directories under the web root, such as the image directory...