Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories and .txt and .zip files via a .....\\\\\\ in the sub parameter to (1) RTE_file_browser.asp or (2) file_browser.asp.