man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-22,
Products Affected