PT-2014-4914

Name of the Vulnerable Software and Affected Versions WD Arkeia virtual appliance AVA versions prior to 10.2.9 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files and execute arbitrary PHP code. This is achieved by manipulating the lang Cookie paramet...