CVE-2009-4434

CVE-2009-4434 affects IDevSpot iSupport 1.8 and earlier. A directory traversal flaw in index.php allows remote attackers to read arbitrary files via .. in the include_file parameter. NVD lists CVSSv2 base score 5.0 (Medium), network vector, low attack complexity, no authentication, partial confid...