Directory traversal

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...

CVE-2014-10010

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...

PT-2015-3654

Name of the Vulnerable Software and Affected Versions PHPJabbers Appointment Scheduler version 2.0 Description A directory traversal issue allows remote attackers to read arbitrary files by providing a .. dot dot in the id parameter in a 'pjActionDownload' action to the 'pjBackup' controller...

CVE-2014-10010: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...