Description
Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the name parameter.
References
- VU#592942 third-party-advisory
- 96619 vdb-entry
- http://buddhalabs.com/Advisories/WebAdvisories.html
- http://www.searchblox.com/developers-2/change-log