Description
Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directories via a .. (dot dot) in the dir parameter.
References
- mypic-dir-directory-traversal(50621) vdb-entry
- http://hi.baidu.com/hirfire/blog/item/c3c0f6dda3ca47d18d10291a.html
- 35092 third-party-advisory
- 54565 vdb-entry
- 35030 vdb-entry