Description
Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
References
- netsupport-manager-directory-traversal(8610) vdb-entry
- 20020321 Webtraversal in PCI Netsupport Manager (all version up to 7 using web extensions) mailing-list
- 4348 vdb-entry