Description
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter.
References
- http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html
- 12153 vdb-entry
- groupmax-directory-traversal(18278) vdb-entry
- 13321 third-party-advisory
- 11773 vdb-entry