CVE-2005-3097

Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir variable.

Date published : 2005-09-28

http://www.cirt.net/advisories/alkalay.shtml

http://www.osvdb.org/19522