PT-2014-2686

Name of the Vulnerable Software and Affected Versions OpenX versions prior to 2.8.10 revision 82710 Description The issue allows remote administrators to read arbitrary files via a .. dot dot in the group parameter to 1 "plugin-preferences.php" or 2 "plugin-settings.php" in www/admin. This can be...