2005-12-20 11:00:00
mitre
PUBLISHED
Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the web root directory name.