Security Advisory
CVE-2006-4550
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading ".", which bypasses a security check.