Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote malicious users to read arbitrary files via a .. (dot dot) in the fileName parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ultrize timesheet 1.2.2 |