ID:6194 - Exploit for Path traversal in IPConfigure Orchid - CVE-2018-10956

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to obtain potentially sensitive information.

The vulnerability exists due to path traversal. A remote attacker can send specially crafted GET requests, conduct directory traversal attack and read arbitrary files outside of the applications web directory.

Remediation