backup-edit traversal

[tablatronix]

backup-edit view and restore are susceptible to transversal injections.
It could be possible to read xml files on system or restore them , allowing renaming and possible fileextension changes.

[tablatronix]

I couldn't get this to do much, but I can get it to restore old user files, and the fact that i can touch users/files is bad enough.

I can also convert user.xml.bak to user.bak.xml

and this is without null byte exploits which would allow alot more