#3 access to complete filesystem

[Julian Ladisch]

In OSADS-1.4 using
http://localhost/OSADS-1.4/?menu=2&langfile=/etc/passwd
at the end of the URL allows to view any file of
the filesystem of the webserver. Simply put the
desired filename at the place of /etc/passwd.

This is a security problem.

[tosch_de]

Logged In: YES
user_id=1578685

A possible solution is described here:
http://osads.sourceforge.net/viewtopic.php?t=80