CVE-2006-7110

Directory traversal vulnerability in the delete function in IMCE before 1.6, a Drupal module, allows remote authenticated users to delete arbitrary files via ".." sequences.

Date published : 2007-03-05

http://www.securityfocus.com/bid/20312

http://drupal.org/node/87101