Description
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading ".", which bypasses a security check.
References
- 20060830 feedsplitter considered harmful mailing-list
- 19779 vdb-entry
- 22000 third-party-advisory