Threats tagged 'ghsa-wqcp-jx8c-vr3m'

A path traversal vulnerability exists in TESI Gandia Integra Total version 4.4.2236.1. An authenticated attacker can exploit the “direstudio” parameter in the specified PHP script to download a ZIP file containing files from the server, including files outside the intended directory via parent directory traversal.