CVE-2006-7133

Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read arbitrary files via (1) ".." sequences or (2) absolute pathnames in the filename parameter.

Date published : 2007-03-05

http://www.securityfocus.com/bid/21150

http://www.craigheffner.com/security/exploits/upload_tool_php.txt