Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via .. sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Savewebportal | Savewebportal | 3.4 (including) | 3.4 (including) |