Arbitrary File Download Vulnerability in Wando OA Professional Edition

Wando OA Professional is a comprehensive office system that combines the functions of collaboration software, portal, ERP, CRM, HR, finance, e-mail and video conferencing. The product has an arbitrary file download vulnerability, which can be exploited by an attacker to download any system file,...