Directory traversal in the back end

Date : 2015-02-12 CVE ID : CVE-2015-0269 Description Arnaud Buchoux with Orange Consulting has discovered a directory traversal vulnerability, which allows logged in back end users to view files outside their file mounts or the document root. It is, however, not possible to edit these files or to...