Leif M. Wright Web Blog 1.1 File Disclosure Vulnerability

ID EDB-ID:23613
Type exploitdb
Reporter Zone-h Security Team
Modified 2004-01-20T00:00:00


Leif M. Wright Web Blog 1.1 File Disclosure Vulnerability. CVE-2004-2127. Webapps exploit for cgi platform

                                            source: http://www.securityfocus.com/bid/9517/info

Web Blog is prone to a file disclosure vulnerability. Remote attackers may gain access to files on the system hosting the server that reside outside of the server root by submitting a malicious request that contains directory traversal sequences. This would permit the attacker to access files that are readable by the server and could disclose sensitive information.