byteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a direct request to files.inc.php.
CVE Status: Modified
No CVSS data available
Exploit-db Github