CVE-2010-3456

CVE-2010-3456 identifies a directory traversal vulnerability in EnergyScripts (ES) Simple Download 1.0. The issue occurs in download.php where a crafted file parameter containing .. can cause reading of arbitrary files, potentially exposing sensitive data. Multiple sources corroborate the descrip...