Surreal ToDo Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in Surreal ToDo version 0.6.1.2. This vulnerability allows unauthenticated attackers to read arbitrary files by manipulating the 'content' parameter in 'index.php'. Attackers can exploit this issue by injecting directory traversal sequences to access sensitive system files, such as configuration and initialization files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server, potentially including configuration files that may contain credentials or other critical information.

Reproduction

To reproduce this vulnerability, send a GET request to 'index.php' with a 'content' parameter that includes directory traversal sequences. This will allow access to files outside the web root, such as 'C:\Windows\win.ini' on a Windows server.