PT-2016-6228

Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter in the...

CVE-2016-5049: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter...