Sysax Multi Server "file" File Disclosure Vulnerability
Description
Craig Freyman has discovered a vulnerability in Sysax Multi Server, which can be exploited by malicious users to disclose potentially sensitive information.
Input passed to the "file" POST parameter in scgi (when "sid" is valid) is not properly verified before being used to display files. This can be exploited to disclose the contents of arbitrary files via directory traversal sequences.
Successful exploitation requires that the "HTTP File Server" feature is enabled.
The vulnerability is confirmed in version 5.57. Other versions may also be affected.
