EUVD-2014-3716

Malware in sbrugna...

Directory Traversal

reportico-web/reportico is vulnerable to directory traversal attacks. Using the xmlin parameter and .. attackers can read files outside of the intended directory...

Directory traversal

Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the xmlin parameter...

CVE-2014-3777: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the xmlin parameter...