ipMonitor Encoded Traversal Arbitrary File Access

A directory traversal flaw was discovered by SensePost to affect ipMonitor versions 8.0 and 8.5. Upon sending a specially formed request to the web server, containing a series of '%2f..' sequences, an unauthenticated attacker is able to traverse the web root and obtain files within the remote fil...