JBrowser 1.0/2.x - 'browser.php' Directory Traversal

Author: Himeur Nourredine
type: webapps
platform: php
port: 
date_added: 2004-01-30  
date_updated: 2012-12-24  
verified: 1  
codes: CVE-2004-2750;OSVDB-39840  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 23618.txt  

source: https://www.securityfocus.com/bid/9535/info

JBrowser has been reported to be vulnerable to directory traversal vulnerability that may allow a remote attacker to gain access to files readable by the web-server that reside outside of the server root directory. This issue is caused by insufficient sanitization of user specified directory paramemters issued to the 'browser.php' script.

http://www.example.org/browser.php?directory=[ATTACKER_SPECIFIED_PATH]