Description
Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in a GET request.
References
- 15052 third-party-advisory
- http://www.autistici.org/fdonato/advisory/Yawcam0.2.5-adv.txt
- 20050421 directory traversal in Yawcam 0.2.5 mailing-list
- 15732 vdb-entry