Secunia

Luigi Auriemma has reported a vulnerability in Xinkaa WEB Station, which can be exploited by malicious people to gain knowledge of potentially sensitive information.

The vulnerability is caused due to an input validation error and can be exploited to read the contents of arbitrary files outside the web root via directory traversal attacks.

The vulnerability has been reported in version 1.0.3 and prior.

Solution
Filter malicious characters and character sequences in a proxy or firewall with URL filtering capabilities.
Further details available in Customer Area

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/xinkaa-adv.txt

Deep Links
Links available in Customer Area