CVE-2012-1471

Directory traversal vulnerability in cataloguefile.php in ocPortal before 7.1.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2012-1471

Directory traversal vulnerability in cataloguefile.php in ocPortal before 7.1.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2012-1471

ocPortal contains a directory traversal vulnerability (CVE-2012-1471) in catalogue_file.php prior to version 7.1.6. An attacker can exploit an unsafe file parameter (via ..) to disclose arbitrary files on the server. The OpenVAS entry also notes an arbitrary file-disclosure issue when fopen() is ...