PT-2014-2288

Name of the Vulnerable Software and Affected Versions Zingiri Forum plugin versions prior to 1.4.4 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the zing forum output function. This is achieved by including a .. dot dot in the...