PT-2012-2119

Name of the Vulnerable Software and Affected Versions Open Business Management OBM versions 2.4.0-rc13 and earlier Description The issue allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the module parameter in an "export page" action. This is a...