CVE-2006-0484

CVE-2006-0484 describes a directory traversal vulnerability in Vis.pl, part of the FACE CONTROL product. The flaw allows remote attackers to read arbitrary files by supplying a .. (dot dot) payload in parameters that open a file, with examples such as (1) s or (2) p. The available documents provi...