CVE-2015-2990

Publication date

2015-09-05 01:00:00

Family

jpcert

State

PUBLISHED

Description

Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter.