CVE-2007-6369

The CVE-2007-6369 entry concerns the WordPress PictPress plugin (versions up to 0.91). The vulnerability is a directory traversal in resize.php, where the attack succeeds by providing a dot-dot in the size or path parameter, allowing an attacker to read arbitrary server files. Impacts are file di...