Description
Directory traversal vulnerability in index.php in PHP Directory Lister (dirLIST) before 0.1.1 allows remote attackers to list the contents of a parent directory via a .. (dot dot) in the folder parameter.
References
- 24987 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=524378
- 26144 third-party-advisory