SPON IP Network Broadcast System Arbitrary File Read Vulnerability

An arbitrary file read vulnerability has been identified in the SPON IP Network Broadcast System, specifically within the rj_get_token.php endpoint. This vulnerability arises from inadequate input validation on the jsondata[url] parameter, allowing attackers to perform directory traversal and access sensitive files on the server. Exploitation of this vulnerability could lead to the disclosure of system configuration, credentials, or internal logic. The affected version range is currently undefined.

Impact

Exploitation of this vulnerability allows for arbitrary file read, with the potential to disclose sensitive information such as system configurations, credentials, or internal application logic.