itafrica webactive 1.0 - Directory Traversal
| EKU-ID: 26185 | CVE: CVE-2001-0306;OSVDB-7706 | OSVDB-ID: |
| Author: slipy | Published: 2001-02-16 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 26185 | CVE: CVE-2001-0306;OSVDB-7706 | OSVDB-ID: |
| Author: slipy | Published: 2001-02-16 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/2386/info It is possible for a remote user to gain read access to directories and files outside the root directory of ITAfrica WEBactive. Requesting a specially crafted URL composed of '../' sequences will disclose an arbitrary directory. http://target/../../../scandisk.log ^^ = Will obviously open the scandisk.log file.