DansGuardian Webmin Module 0.x - 'edit.cgi' Directory Traversal
| EKU-ID: 28975 | CVE: OSVDB-3445 | OSVDB-ID: |
| Author: FIST | Published: 2004-01-10 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 28975 | CVE: OSVDB-3445 | OSVDB-ID: |
| Author: FIST | Published: 2004-01-10 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/9394/info A problem has been identified in the handling of input by scripts packaged with the DansGuardian Webmin Module. Because of this, it is possible for a remote to gain access to potentially sensitive information. https://www.example.com:10000/dansguardian/edit.cgi?file=[FILE]