CVE-2016-4814

Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan aka GSI OldGSIMaps before January 2015 on Windows allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-4814

The CVE-2016-4814 entry concerns Old_GSI_Maps (Geospatial Information Authority of Japan) prior to January 2015 on Windows, where kml2jsonp.php contains a directory traversal flaw. This allows remote attackers to read arbitrary files from the server. Root cause is directory traversal in kml2jsonp...

Source code of Old_GSI_Maps prior to January, 2015 vulnerable to directory traversal

Overview kml2jsonp.php contained in source code of OldGSIMaps prior to January, 2015 provided by the Geospatial Information Authority of Japan GSI contains a directory traversal vulnerability CWE-22. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...