CVE-2015-2990 Information

Description

Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter.

Reference

http://jvn.jp/en/jp/JVN09283606/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2015-000122 http://www.desknets.com/neo/support/mainte/2590/