quote:
Originally posted by Menthix
Removed the FileServer script from the site until this is fixed. I know it was reported over half a year ago, just didn't read the thread. Thanks to John for pointing me to it.
Will inform the creator too, but since his last post was in 2006 and all I have to contact is his forum profile I doubt it will result in much.
<from first page>
* v1.1.1
* Huge Security Fix (!cd ..\..\..\etc allowed to browse the whole disk)
I'm using version 1.1.2 and it does not have the bug as mentioned above...