CVE-2008-7178

The CVE-2008-7178 issue affects XOOPS Uploader module 1.1, exposing a Directory Traversal vulnerability. An attacker can read arbitrary files by supplying ".." in the filename parameter of the downloadfile action to index.php, enabling remote access to sensitive files. The vulnerability is docume...