webmin: arbitrary file read
| Package(s): | webmin | CVE #(s): | CVE-2006-3392 | ||||||||
| Created: | July 19, 2006 | Updated: | August 7, 2006 | ||||||||
| Description: | Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files. | ||||||||||
| Alerts: |
| ||||||||||