Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: DokFLeed (dokfleeddokfleed.net)
Date: Wed Sep 09 2009 - 03:17:15 CDT
Please find the following Advisory
Advisory No.: ISNSC-0910
ChartDirector Critical File Access
Program Affected: http://www.chartdir.com for .NET
Type of Advisory: Mid Disclosure.
Affected/Tested Versions: Random
Widely used Chart Component on Financial & Stock Trading websites
The query variable "cacheId=" is not sanitized, it will can allow critical
Proof Of Concept
Upgrade to latest Chart Dir or apply the following patch (ChartDirector for
.NET Ver 5.0.1 Patch 2):
The problem you mentions affect ChartDirector for .NET.
The current version of ChartDirector for .NET on our web site (Ver 5.0.2)
already has this issue fixed. So this issue no longer occurs with the
current version of ChartDirector for .NET.
For people using earlier versions of ChartDirector, it is suggested they
upgrade to the latest version. They may also apply the following patch
(ChartDirector for .NET Ver 5.0.1 Patch 2):