PT-2015-4224

Name of the Vulnerable Software and Affected Versions Cart66 Lite plugin versions prior to 1.5.4 Description The issue allows remote authenticated users to read arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. dot dot in the member download action to the...