Cr@zy_King has discovered a vulnerability in WR-Meeting, which can be exploited by malicious people to disclose sensitive information.

Input passed to the "msnum" parameter in index.php (when "event" is set to "coment") is not properly verified before being used to read files. This can be exploited to read arbitrary files from local resources via directory traversal attacks.

Successful exploitation requires that "magic_quotes_gpc" is disabled.

The vulnerability is confirmed in version 1.0. Other versions may also be affected.

Solution
Edit the source code to ensure that input is properly verified.

Provided and/or discovered by
Cr@zy_King

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/5637

Deep Links
Links available in Customer Area