CVE-2013-7097: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the showmask parameter to installer/overview.php...

PT-2014-3262

Name of the Vulnerable Software and Affected Versions 7 Media Web Solutions eduTrac versions prior to 1.1.2 Description A directory traversal issue allows remote attackers to read arbitrary files by using a .. dot dot in the showmask parameter to the "installer/overview.php" endpoint...