Logic Flaw Vulnerability in Cicada Knowledge Portal System

Cicada Knowledge Portal System chanzhiEPS is an open source and free enterprise portal system. It is built-in article publishing , member management , forum comments , product display , online sales , customer service tracking and other functions . Cicada Knowledge Portal System has a logic flaw...

CVE-2018-10122: Improper Limitation of a Pathname to a Restricted Directory

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...