CVE-2009-5093

CVE-2009-5093 describes a directory traversal in Gastbuch (Gästebuch) 1.6 where an attacker can read arbitrary files by supplying a .. in the start parameter. The vulnerability affects gastbuch.php and stems from improper path handling, enabling remote access without authentication. Exploitation ...