Design/Logic Flaw

2007-07-2517:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name.

CPENameOperatorVersion
dirlist_phple0.1.1

CPE	Name	Operator	Version
	dirlist_php	le	0.1.1

References

secunia.com/advisories/26144

sourceforge.net/project/shownotes.php?release_id=524378

www.securityfocus.com/bid/24987