Description
Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter.
References
- 33117 vdb-entry
- 2340 third-party-advisory
- 22681 vdb-entry
- http://forums.avenir-geopolitique.net/viewtopic.php?t=2692
- 20070222 Pics Navigator Directory Traversal Vulnerability mailing-list
- picsnavigator-dir-directory-traversal(32646) vdb-entry
- 24273 third-party-advisory
- ADV-2007-0711 vdb-entry