Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote malicious user to access files inside the server's web directory. NOTE: this product has been obsolete since June 2013.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
progress telerik extensions for asp.net mvc |