Skip to content
OpenAdvisories
Unscored CVE-2016-5049 EUVD-2016-6002GHSA-jvx3-hwhq-qqfj

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot do…

Published Aug 26, 2016 · Updated Aug 6, 2024 · Assigned by certcc

Description

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the SESID parameter in conjunction with a filename in the FNAME parameter.

References