Description
Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to read arbitrary files via a .. (dot dot) in a request.
References
- http://www2s.biglobe.ne.jp/~tatsuji/souko/Guidance1.html
- JVNDB-2013-000112 third-party-advisory
- JVN#41703192 third-party-advisory