CVE-2010-3456

2010-09-17T16:00:02
ID CVE-2010-3456
Type cve
Reporter NVD
Modified 2017-08-16T21:32:58

Description

Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.