Directory traversal

Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. dot dot in the SkinPath parameter and a .zip URL in the HttpSkin parameter. NOTE: this...