Skip to content

CVE-2016-5049 Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the SESID parameter in conjunction with a filename in t...

HighCVSS 7.5 EPSS 2.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the SESID parameter in conjunction with a filename in the FNAME parameter.

Affected products

ProductAffected versionsFixed in
readydesk = 9.1 No fix listed

References

  • VU#294272 third-party-advisory us-government-resource
  • 92487 vdb-entry