CVE-2012-1047: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WWWHELP Service js/html/wwhelp.htm in Cyberoam Central Console CCC 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter in an Onlinehelp action...