Imperva’s Application Defense Center has announced that several vulnerabilities exist in BusinessObject’s Crystal Reports’ Web Interface. These vulnerabilities allow a potential hacker to retrieve and delete any file from the file system of the server on which it runs, as well as causing a complete denial of service to the server.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33230/imperva.crystal.txt
Source: https://packetstormsecurity.com/files/33230/imperva.crystal.txt.html