Full title: CartXpress Remote File Upload / File Disclosure Vulnerabilities Category: web applications Platform: php # 0day.today @ http://0day.today/