CVE-2013-6000 Information

Description

Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to read arbitrary files via a .. (dot dot) in a request.

Reference

http://jvn.jp/en/jp/JVN41703192/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2013-000112 http://www2s.biglobe.ne.jp/~tatsuji/souko/Guidance1.html