Description
Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter.
References
- 20050925 ContentServ features remote file disclosure mailing-list
- 14943 vdb-entry
- 16929 third-party-advisory