PT-2013-4543

Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions prior to 2.12.5 Description A directory traversal issue exists in the lfCheckFileName function, allowing remote attackers to read arbitrary image files. This is achieved through vectors involving the image parameter to...