Security Advisory
CVE-2006-6999
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file number in a modified id parameter.