Description
Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the month parameter.
References
- 1012911 vdb-entry
- 20050116 Minis directory traversal vulnerability mailing-list
- 13866 third-party-advisory
- minis-month-directory-traversal(18928) vdb-entry
- 20050116 Minis directory traversal vulnerability mailing-list
- 12279 vdb-entry