CVE-2017-16148

The CVE-2017-16148 entry concerns the static file server serve46 . The connected advisories document a directory traversal vulnerability where a URL containing relative path segments (for example, ../../) can cause the server to disclose files outside the intended directory. The vulnerability aff...

CVE-2017-16210

jnjjserver is a static file server. jnjjserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16175

ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16193

CVE-2017-16193 affects the static file server mfrs . The vulnerability is a directory traversal flaw where a URL containing "../" (and variants) allows access to files outside the intended root. Public documents confirm the root cause is improper resolution of relative file paths, enabling potent...

CVE-2017-16162

22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16165

calmquist.static-server is a static file server. calmquist.static-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16181

CVE-2017-16181 affects the static file server wintiwebdev. The vulnerability is a directory traversal flaw that lets an attacker access the filesystem by requesting URLs containing ../ sequences. This is confirmed across multiple sources (NVD entry for CVE-2017-16181 and related advisories). Impa...

CVE-2017-16182

serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16177

CVE-2017-16177 affects chatbyvista (a file server). The vulnerability is a directory traversal flaw triggered by crafted URLs that include path segments like ../, allowing access to the filesystem outside the intended directory. The CVE entry documents this vulnerability with a medium to high imp...

CVE-2017-16176

The CVE concerns jansenstuffpleasework, a file server, with a directory traversal vulnerability exploitable by placing sequences like ../ in the URL to access the filesystem. Multiple connected sources confirm the issue and demonstrate that affected versions resolve relative file paths, permittin...

CVE-2017-16123

CVE-2017-16123 affects the welcomyzt file server. A directory traversal flaw allows an attacker to access the filesystem by including ../ sequences in the URL, exposing sensitive files. Multiple sources (GitHub advisory GHSA-8FV7-VM2P-5495, OSV, CNVD/CNVD-2018-14369, NVD record) describe the issu...

CVE-2017-16139

CVE-2017-16139 affects the jikes file server. The vulnerability is a directory traversal flaw in path resolution that allows an attacker to access the filesystem by placing sequences like "../" in the URL. The initial description notes that accessible files are restricted to those with .htm and ....

CVE-2017-16161

shenliru is a simple file server. shenliru is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16148

serve46 is a static file server. serve46 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16123

welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2018-3724

general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path...

CVE-2018-3724

general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path...

CVE-2017-16140

The CVE-2017-16140 entry concerns lab6.brit95, a file server vulnerable to a directory traversal flaw. The root cause is improper handling of path traversal, allowing an attacker to access the filesystem by including ../ in the URL. Public records (GHSA, OSV, CNVD, CNVD-2018-14250, Veracode, NVD)...

CVE-2017-16177

chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16158

dcserver is a static file server. dcserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...