CVE-2018-15810

https://notcve.org/view.php?id=CVE-2018-15810

Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize filename parameters. Visiology Flipbox Software Suite en versiones anteriores a la 2.7.0 permite el salto de directorio mediante %5c%2e%2e%2f debido a que no sanea los parámetros de nombre de archivo. • http://flipbox.net/news/620 https://gist.github.com/nenf/7ed2d800ca8d1538cf6bb0a771dc7dae • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •