A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter.
| Software | From | Fixed in |
|---|---|---|
| 4pace / cadclick | - | 1.11.0.x |