CVE-2017-5966: Improper Limitation of a Pathname to a Restricted Directory

Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download.aspx with the file parameter...

PT-2017-16794

Name of the Vulnerable Software and Affected Versions Sitecore CRM version 8.1 Rev 151207 Description The issue allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack. This is achieved by exploiting the file parameter in the...