Alstrasoft · Alstrasoft Epay Pro · CVE-2005-3026
**Name of the Vulnerable Software and Affected Versions**
Alstrasoft Epay Pro versions 2.0 and earlier
**Description**
The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the index.php file. This is achieved by using a .. (dot dot) in the `read` parameter.
**Recommendations**
For Alstrasoft Epay Pro versions 2.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.