Description
Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded files.
References
- 3770 vdb-entry
- bodington-uploadarea-obtain-information(14986) vdb-entry
- http://sourceforge.net/tracker/index.php?func=detail&aid=789761&group_id=87659&atid=583930
- 9528 vdb-entry
- 10749 third-party-advisory