Directory traversal vulnerability in index.php in QwikiWiki allows remote malicious users to read arbitrary files via a .. (dot dot) and a %00 at the end of the filename in the page parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
david barrett qwikiwiki 1.4.1 |