xweb 1.0 - Directory Traversal



EKU-ID: 29290 CVE: CVE-2004-1838;OSVDB-4460 OSVDB-ID:
Author: Donato Ferrante Published: 2004-03-22 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/9937/info

XWeb is reportedly prone to directory traversal attacks. Remote attackers may exploit this issue to gain access to sensitive files outside of the server root. This would occur in the context of the server, i.e.: any files the server could access would also be accessible to the attacker.

http://www.example.com/../../../../etc/passwd