Description
Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter.
References
- 2340 third-party-advisory
- http://forums.avenir-geopolitique.net/viewtopic.php?t=2692
- 20070222 Pics Navigator Directory Traversal Vulnerability mailing-list
- 33118 vdb-entry
- picsnavigator-dir-directory-traversal(32646) vdb-entry