JSPWiki Edit.jsp editor Parameter Traversal Local File Inclusion

The remote web server hosts JSPWiki, an open source WikiWiki engine built using standard J2EE components. The installed version of JSPWiki fails to sanitize user input to the 'editor' parameter of the 'Edit.jsp' script of directory traversal sequences before using it to include and execute an...