Directory traversal

Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php/admin/translationManager...

CVE-2013-5692

Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php/admin/translationManager...

PT-2013-5728

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 3.5 Description A directory traversal issue allows remote authenticated administrators to include and execute arbitrary local files. This is achieved by using a .. dot dot in the file parameter to the...