Directory traversal vulnerability in MetInfo 5.3.17 allows remote attackers to read information from any ini format file via the f_filename parameter in a fingerprintdo action to admin/app/physical/physical.php.
| Software | From | Fixed in |
|---|---|---|
| metinfo / metinfo | 5.3.17 | 5.3.17.x |