CVE-2006-1762

Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.

Date published : 2006-04-12

http://www.securityfocus.com/bid/17465

http://www.securityfocus.com/archive/1/430607/100/0/threaded