Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component ‘index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php’.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18878
Reference (s):
- https://github.com/zorlan/skycaiji/issues/13