CVE-2013-7190 Information

Description

Multiple directory traversal vulnerabilities in iScripts AutoHoster possibly 2.4 allow remote attackers to read arbitrary files via the (1) tmpid parameter to websitebuilder/showtemplateimage.php (2) fname parameter to admin/downloadfile.php or (3) id parameter to support/admin/csvdownload.php; or (4) have an unspecified impact via unspecified vectors in support/parser/main_smtp.php.

Reference

http://seclists.org/fulldisclosure/2013/Dec/121 https://exchange.xforce.ibmcloud.com/vulnerabilities/89818