Description
Directory traversal vulnerability in modules/backup/download.php in Lanai Core 0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
References
- 9490 exploit
- ADV-2009-2402 vdb-entry
- lanaicore-download-directory-traversal(52718) vdb-entry