Description

SimpleHelp has a path traversal vulnerability. This flaw arises from insufficient validation of user-supplied input, allowing unauthenticated attackers to craft HTTP requests that traverse directories and access arbitrary files on the server. Exploitation of this vulnerability can lead to unauthorized exposure of sensitive information, including server configuration files and hashed user passwords, potentially compromising the the system.

Remediation

Upgrade to the latest version of SimpleHelp.

References

Related Vulnerabilities