Security Advisory
CVE-2007-6378
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.