Description
Directory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows remote attackers to read arbitrary files via ".." sequences in the function parameter.
References
- 20060524 iBoutique.MALL - Directory Traversal mailing-list
- 1023 third-party-advisory
- iboutiquemall-index-directory-traversal(26739) vdb-entry