Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote malicious users to read arbitrary files via a .. (dot dot) in the _path parameter.
source: wwwsecurityfocuscom/bid/17345/info
Blank'N'Berg is prone to a directory-traversal vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application ...
Vulmon