Description
Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\ characters in an HTTP request.
References
- http://aluigi.altervista.org/adv/xinkaa-adv.txt
- 14349 third-party-advisory
- 12606 vdb-entry
- ADV-2005-0189 vdb-entry
- xinkaa-web-directory-traversal(19404) vdb-entry