CVE-2006-2791 Information

Description

Directory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows remote attackers to read arbitrary files via ..\ sequences in the function parameter.

Reference

http://securityreason.com/securityalert/1023 http://www.securityfocus.com/archive/1/435164/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/26739