CVE-2012-6522

CVE-2012-6522 describes a directory traversal vulnerability in w-CMS 2.01 . The issue resides in the getContent function of codes/wcms.php , where an attacker can cause the system to read arbitrary files by supplying a ".." path segment in the p parameter. The vulnerability is triggered remotely ...