Razorcms · Razorcms · CVE-2012-6038
**Name of the Vulnerable Software and Affected Versions**
razorCMS versions prior to 1.2.1
**Description**
The issue allows remote authenticated users to access certain administrator directories and files without proper restriction, enabling them to read, edit, rename, move, copy, and delete files. This is achieved via the `dir` parameter in a "fileman" or "filemanview" action, and has been referred to as a "path traversal" issue.
**Recommendations**
For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the administrator directories and files to minimize the risk of exploitation.