1414 matches found
CVE-2017-16183
CVE-2017-16183 affects iter-server, a static file server. The vulnerability is a directory traversal flaw where crafted URLs containing ../ allow access to the filesystem. Examples and descriptions across multiple sources confirm direct path traversal via relative file paths, potentially exposing...
CVE-2017-16140
lab6.brit95 is a file server. lab6.brit95 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16174
CVE-2017-16174 is a directory traversal vulnerability in whispercast, a file server. The issue allows a malicious client to access files outside the intended directory root by using traversal sequences such as ../../ in the URL. Connected advisories (GHSA-m874-69WW-W7JQ and NPM advisory 466, amon...
CVE-2017-16190
Details show that the static file server dcdcdcdcdc is affected by a directory traversal vulnerability. An attacker can access the filesystem by placing relative path sequences (e.g., "../" or similar encodings) in the request URL, potentially escaping the intended document root. This is document...
CVE-2017-16167
Affected software: yyooopack (a simple file server). Vulnerability: directory traversal via crafted URL segments like ../, allowing access to filesystem outside the intended directory. Root cause/details (as stated): the vulnerability resides in how relative paths are resolved, enabling traversal...
CVE-2017-16175
CVE-2017-16175 concerns a vulnerability in the file server ewgaddis.lab6 where a directory traversal flaw allows an attacker to access the filesystem by placing ".." in the URL (e.g., ../../). Connected sources repeatedly state that the vulnerability stems from improper path resolution, enabling ...
CVE-2017-16218
dgard8.lab6 is a static file server. dgard8.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16170
CVE-2017-16170 affects liuyaserver (a static file server) and is a directory traversal vulnerability exploitable by placing ../ in the URL to access the filesystem. The vulnerability is documented with CVSS metrics (v3 base 7.5, HIGH; NETWORK, LOW complexity) and is referenced across multiple sou...
CVE-2017-16181
wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16193
mfrs is a static file server. mfrs is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16156
CVE-2017-16156 affects the static file server myprolyz, where a directory traversal flaw allows accessing the filesystem by placing relative paths (e.g., ../ or ../../.. ) in the URL. The vulnerability is demonstrated by examples such as requesting URLs that traverse up the directory tree to reve...
CVE-2017-16186
The CVE CVE-2017-16186 affects 360class.jansenhm, a static file server. A directory traversal flaw allows an attacker to access the host filesystem by crafting URLs containing ../ sequences, enabling potential disclosure of private files. Reported impact supports confidentiality risk (NVD CVSS2/C...
CVE-2017-16120
CVE-2017-16120 concerns the static file server liyujing , which is vulnerable to a directory traversal flaw. An attacker can access filesystem paths by placing relative path components (e.g., ../../) in the URL, potentially exposing private files outside the intended directory root. Affected vers...
CVE-2017-16163
dylmomo is a simple file server. dylmomo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16161
shenliru, a simple file server, is vulnerable to a directory traversal issue (CVE-2017-16161) where exposing the filesystem is possible by using relative paths like ../ in the URL. The root cause is improper handling of relative path resolution, allowing access to files outside the intended direc...
CVE-2017-16162
Summary: CVE-2017-16162 affects the 22lixian simple file server, where a directory traversal flaw allows an attacker to access the filesystem by sending URLs containing relative paths like "../". The public sources (NVD/CVE, GHSA advisories, Veracode, CNVD, OSV, GitLab/file, npm advisory) describ...
CVE-2017-16197
qinserve is a static file server vulnerable to a directory traversal issue. An attacker can access the filesystem by supplying relative paths (e.g., ../../… in the URL). The issue is documented across multiple sources (NVD, GHSA advisory, Veracode, OSV, CNVD, etc.). Impact described as potential ...
CVE-2017-16171
hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...