Security Advisory
CVE-2007-5813
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ticketid and (2) filename parameters.