Directory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) Default_Theme parameter to header.php or (2) ModPath parameter to modules/cluster-paradise/cluster-E.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Net_portal_dynamic_system | Net_portal_dynamic_system | * | 5.10 (including) |