• info
• discussion
• exploit
• solution
• references

JAF CMS Directory Traversal Vulnerability Allowing Script Code Execution And Information Disclosure

An exploit is not required.