CVE-2014-4940: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Tera Charts tera-charts plugin 0.1 for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the fn parameter to 1 charts/treemap.php or 2 charts/zoomabletreemap.php...

PT-2014-6219

Name of the Vulnerable Software and Affected Versions Tera Charts tera-charts plugin version 0.1 for WordPress Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This is achieved by including a .. dot dot in the fn parameter ...