Description
Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter.
References
- 20020327 Citrix Nfuse directory traversal with boilerplate.asp mailing-list
- nfuse-boilerplate-directory-traversal(8654) vdb-entry
- 4382 vdb-entry