← Back to CVE List
CVE-2018-10122
QingDao Nature Easy Soft Chanzhi Enterprise Portal System (aka chanzhieps) pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt