PT-2017-16521

Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 6.8.4 Description A directory traversal issue exists, allowing remote authenticated users to read or delete arbitrary files. This is achieved by providing a .. dot dot in the fm selected array parameter in the...