King-Avis 路径遍历漏洞

King-Avis is an application from King-Avis, Inc. for online stores to provide automated review collection services. A security vulnerability exists in King-Avis versions prior to 17.3.15, which stems from an improper pathname restriction in the Prestashop module that allows a user who knows the...