CVE-2006-4651

The CVE-2006-4651 issue concerns a directory traversal vulnerability in threesquared.net’s PHP download functionality (download/index.php and possibly download.php). The root cause is improper handling of the file parameter, allowing an attacker to use .. sequences to overwrite arbitrary local fi...