Security Advisory
CVE-2006-3274
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \ (backslash) characters in the URL to certain directories under the web root, such as the image directory.