Caravan Business Server Security Vulnerabilities - February

CVE-2004-2170

Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to read arbitrary files via the fname parameter.