osCommerce versions 2.x suffer from a directory traversal attack that allows for access to directories outside of the webroot.
osCommerce versions 2.x suffer from a directory traversal attack that allows for access to directories outside of the webroot.