Security Advisory
CVE-2006-4579
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (dot dot) in the language parameter.