Directory traversal

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server VCS before X5.1 allow remote authenticated users to read arbitrary files via a .. dot dot in the page parameter to 1 helppage.php or 2 user/helppage.php...

CVE-2009-4511

The CVE-2009-4511 issue affects TANDBERG Video Communication Server (VCS). It is a directory traversal flaw in the web management interface (two scripts: helppage.php and user/helppage.php) that an authenticated administrator or lower-privilege user could exploit to read arbitrary files on the ap...