PT-2015-4925

Name of the Vulnerable Software and Affected Versions SYNCK GRAPHICA Download Log CGI versions 3.0 and earlier Description A directory traversal issue allows remote attackers to read arbitrary files by providing a crafted filename. Recommendations For versions 3.0 and earlier, at the moment, ther...

SYNCK GRAPHICA Download Log CGI vulnerable to directory traversal

Overview Download Log CGI provided by SYNCK GRAPHICA contains an issue in processing file names, which may result in a directory traversal vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...