Description
Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter.
References
- JVNDB-2015-000122 third-party-advisory
- JVN#09283606 third-party-advisory
- http://www.desknets.com/neo/support/mainte/2590/