Description
index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name.
References
- 24987 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=524378
- 26144 third-party-advisory