TI-2008-05698 CVE-2008-6002 · GHSA-hrp6-qx55-57p4Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when…Priority LOW 36Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter.CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.02192 · Published 2009-01-28 · No fix listed CWE-22