Description
The web application uses ZK Framework. Due to a vulnerability in the AuUploader component, an unauthenticated attacker can read arbitrary files in the web application context.
Remediation
Upgrade to the latest version of ZK Framework
References
Related Vulnerabilities
WordPress Plugin Email Subscribers & Newsletters Information Disclosure (3.4.7)
WordPress Plugin MP3-jPlayer Information Disclosure (2.3.2)
WordPress Plugin WP Easy full backup Information Disclosure (1.4)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8393)
WordPress Plugin Advanced Woo Search Information Disclosure (1.99)