CVE-2013-7448

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...

CVE-2013-7448

CVE-2013-7448 concerns a path traversal in DidiWiki’s wiki.c, where the file-writer path in the API endpoint api/page/get fails to validate the page parameter, enabling remote attackers to read arbitrary files. Multiple connected sources reiterate the same vulnerability across various advisories ...