PT-2014-8735

Name of the Vulnerable Software and Affected Versions DukaPress plugin versions prior to 2.5.4 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the dp img resize function. This is achieved by providing a .. dot dot in the src...