CVE-2017-14513: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in MetInfo 5.3.17 allows remote attackers to read information from any ini format file via the ffilename parameter in a fingerprintdo action to admin/app/physical/physical.php...