ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Eperl | Ralf_s._engelschall | 2.2.12 (including) | 2.2.12 (including) |