PT-2020-10311

Name of the Vulnerable Software and Affected Versions Selesta Visual Access Manager VAM versions 4.15.0 through 4.29 Description An issue allows a user with valid credentials to read XML files on the filesystem via the web interface. The PHP page /common/vam editXml.php does not check the paramet...