reportico-web/reportico is vulnerable to directory traversal attacks. Using the xmlin parameter and .. attackers can read files outside of the intended directory...
5CVSS6.2AI score0.03683EPSS
SaveExploits1References4Affected Software1
Prion•added 2014/07/16 2:19 p.m.•10 views
Directory traversal
Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. dot dot in the xmlin parameter...
