CVE-2018-10122

The CVE-2018-10122 entry concerns QingDao Nature Easy Soft Chanzhi Enterprise Portal System (pro1.6). Affected component is the file.php pathname handling, where directory traversal sequences allow remote attackers to read arbitrary files. This is a remote file disclosure vulnerability with CVSS ...