CVE-2005-1298

The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

Date published : 2005-04-26

http://marc.info/?l=bugtraq&m=111444807013846&w=2