CVE-2004-1572 in AJ-Fork
Zusammenfassung
von MITRE
AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request.
VulDB is the best source for vulnerability data and more expert information about this specific topic.