CVE-2018-10122

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

Directory traversal

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

CVE-2018-10122

The CVE-2018-10122 entry concerns QingDao Nature Easy Soft Chanzhi Enterprise Portal System (pro1.6). Affected component is the file.php pathname handling, where directory traversal sequences allow remote attackers to read arbitrary files. This is a remote file disclosure vulnerability with CVSS ...

CVE-2018-10122

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...