• ACME mini_httpd is a minimalistic web server designed for optimal performance, high security, and as little use of system resources as possible.
  
  ACME mini_httpd before version 1.30 lets remote users read arbitrary files via a logical bug.

• Upgrade to the latest version of ACME mini_httpd. This issue was fixed in version 1.30.

• • CVE-2018-18778
  • mini_httpd

• 

• CVE-2018-18778

• CWE-23

• Directory Traversal

• WordPress Plugin Insert Pages Directory Traversal (3.2.3)
• WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.0.0)
• WordPress Plugin Chat Room Directory Traversal (0.1.2)
• Multiple vulnerabilities in Ioncube loader-wizard.php
• WordPress Plugin DukaPress Directory Traversal (2.5.2)