Description
Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter.
References
- 2245 third-party-advisory
- prb-p-directory-traversal(32425) vdb-entry
- 33693 vdb-entry
- http://sourceforge.net/project/shownotes.php?group_id=176562&release_id=485414
- 20070213 true: [Full-disclosure] Arbitrary file disclosure vulnerability in php rrd browser < 0.2.1 (prb) mailing-list
- 20070211 Arbitrary file disclosure vulnerability in php rrd browser < 0.2.1 (prb) mailing-list