Sytel Softdial Contact Center Path Traversal Vulnerability

A path traversal vulnerability has been identified in Softdial Contact Center by Sytel Ltd. This issue allows attackers to manipulate the 'id' parameter of the '/softdial/scheduler/load.php' endpoint, enabling them to navigate outside the intended directory. As a result, unauthorized access to sensitive files beyond the expected scope could be achieved, posing a significant security risk.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files outside the intended directory, creating a potential risk of exposing confidential information or system files.