CVE-2006-1762
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.
Date published : 2006-04-12
http://www.securityfocus.com/bid/17465
http://www.securityfocus.com/archive/1/430607/100/0/threaded