ISPworker is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to obtain sensitive information that could aid in further attacks. These issues affect ISPworker 1.21 and 1.23 other versions may also be affected.

• http://www.ispware.de/ispworker/index.php
• http://www.securityfocus.com/bid/26277

---

Updated on 2015-03-25