CVE-2009-1768

Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Date published : 2009-05-22

http://www.securityfocus.com/bid/34995

https://www.exploit-db.com/exploits/8700