CVE-2012-1617

OSClass vulnerability CVE-2012-1617 affects combine.php prior to 2.3.6. A directory-traversal flaw (via a .. in the type parameter) may allow remote attackers to read and write arbitrary files and potentially upload files. Impact is partial confidentiality and integrity and no availability impact...