PT-2016-3623

Name of the Vulnerable Software and Affected Versions Zip Attachments plugin versions prior to 1.5.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the za file parameter of the download.php file...