CVE-2012-6038

The CVE-2012-6038 entry concerns razorCMS prior to 1.2.1 where admin/core/admin_func.php fails to restrict access to certain administrator directories/files. The vulnerability enables remote authenticated users to read, edit, rename, move, copy and delete files through (1) the dir parameter in fi...