CVE-2012-1047

CVE-2012-1047 describes a directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) of Cyberoam Central Console (CCC) 2.00.2 . The flaw allows remote attackers to include and execute arbitrary local files by using a “..” in the file parameter of an Online_help action. This is ...