CVE-2006-4550

Publication date

2006-09-06 00:00:00

Family

mitre

State

PUBLISHED

Description

Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading ".", which bypasses a security check.