Description
Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.
References
- 20050317 Another includer.cgi problem? mailing-list
Published Mar 20, 2005 · Updated Aug 7, 2024 · Assigned by mitre
Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.