Halo path traversal vulnerability

Halo is a personal blogging system for individual developers. A security vulnerability exists in halo version 1.1.3. An attacker can exploit the vulnerability to overwrite some files in a user's directory, such as ftl files, .bashrc files, and eventually gain access to the operating system...