CVE-2005-1298 Information

Description

The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

Reference

http://marc.info/?l=bugtraq&m=111444807013846&w=2