CVE-2018-10122: Improper Limitation of a Pathname to a Restricted Directory

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

PT-2018-9694

Name of the Vulnerable Software and Affected Versions: QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps version pro1.6 Description: The issue allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to "www/file.php" API...