CVE-2006-3274

CVE-2006-3392 Description Webmin before 1290 and Usermin before 1220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "%01" sequences, which bypass the removal of "/" sequences before bytes such as "%01" are removed from the filename NOTE: This is a different

Webmin < 1.290 / Usermin < 1.220 - Arbitrary file disclosure

CVE-2006-3392 wwwcvedetailscom/cve/CVE-2006-3392/ Webmin before 1290 and Usermin before 1220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "%01" sequences, which bypass the removal of "/" sequences before bytes such as "%01" are removed from the fi