medium5.0
CVE-2005-2786
Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences…
Impact
Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cosmoshop | Cosmoshop | Version 8.10.78 |