CVE-2007-6528
Publication date 27 December 2007
Last updated 24 July 2024
Ubuntu priority
Description
Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) and modified filename in the movie parameter.