CVE-2014-8676 | Soplanning up to 1.32 file_get_contents path path traversal (EDB-37604 / BID-75726)
A vulnerability classified as problematic has been found in Soplanning up to 1.32. Affected is the function file_get_contents. The manipulation of the argument path with the input .. as part of Parameter leads to path traversal.
This vulnerability is traded as CVE-2014-8676. It is possible to launch the attack remotely. Furthermore, there is an exploit available.