CVE-2007-1100

Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Date published : 2007-02-26

http://www.securityfocus.com/bid/22703

http://www.securityfocus.com/archive/1/461145/100/0/threaded