Directory traversal

2007-03-1301:19:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the pdf_file parameter.

CPENameOperatorVersion
assetmaneq<= 2.4a

CPE	Name	Operator	Version
	assetman	eq	<= 2.4a

References

securityreason.com/securityalert/2410

www.securityfocus.com/archive/1/462577/100/0/threaded

www.securityfocus.com/bid/22921

www.exploit-db.com/exploits/3458