The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

Published Apr 26, 2005 · Updated Aug 7, 2024 · Assigned by mitre