UNIDOmedia Chameleon LE < 1.203 - Directory Traversal via rmid Parameter
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter.