CVE-2017-14979 — Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, rel — CVE Database · The Intelligence Room