2005-04-26 04:00:00
mitre
PUBLISHED
The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.