Description
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. (dot dot) in the dir parameter.
References
- ADV-2006-0031 vdb-entry
- 18298 third-party-advisory
- 16137 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=382593&group_id=152499