CVE-2017-16177

chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16221

yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16199

susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16171

hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16211

CVE-2017-16211 concerns the static file server lessindex , which is vulnerable to a directory traversal vulnerability. The underlying issue is that the server resolves relative file paths, allowing an attacker to access the filesystem by injecting sequences like "../" in the URL. This can disclos...

CVE-2017-16193

mfrs is a static file server. mfrs is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16178

Summary: CVE-2017-16178 affects the intsol-package file server and is a directory traversal vulnerability that allows an attacker to access the filesystem by including "../" in the URL. The issue is documented across multiple sources (NVD entry and advisories) with concrete description and exampl...

CVE-2017-16120

CVE-2017-16120 concerns the static file server liyujing , which is vulnerable to a directory traversal flaw. An attacker can access filesystem paths by placing relative path components (e.g., ../../) in the URL, potentially exposing private files outside the intended directory root. Affected vers...

CVE-2017-16175

CVE-2017-16175 concerns a vulnerability in the file server ewgaddis.lab6 where a directory traversal flaw allows an attacker to access the filesystem by placing ".." in the URL (e.g., ../../). Connected sources repeatedly state that the vulnerability stems from improper path resolution, enabling ...

CVE-2017-16140

The CVE-2017-16140 entry concerns lab6.brit95, a file server vulnerable to a directory traversal flaw. The root cause is improper handling of path traversal, allowing an attacker to access the filesystem by including ../ in the URL. Public records (GHSA, OSV, CNVD, CNVD-2018-14250, Veracode, NVD)...

dgard8.lab6 Directory Traversal Vulnerability

dgard8.lab6 is a static file server. A directory traversal vulnerability exists in dgard8.lab6. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

fancy-server path traversal vulnerability

fancy-server is a static file server. A path traversal vulnerability exists in versions of fancy-server prior to 0.1.4. An attacker can exploit this vulnerability by submitting input e.g. '. /' to read files from other directories...

yttivy directory traversal vulnerability

yttivy is a static file server. A directory traversal vulnerability exists in yttivy. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

PT-2018-16150 · Unknown · Crud-File-Server

Name of the Vulnerable Software and Affected Versions: crud-file-server versions prior to 0.8.0 Description: The issue is related to a lack of validation of file names, leading to a Cross-Site Scripting vulnerability. This is due to insufficient sanitization of filenames when the directory index ...

Directory traversal

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory...

CVE-2014-10066

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory...

CVE-2014-10066

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory...

crud-file-server node module path traversal vulnerability

The crud-file-server node module is a file server that supports create, read, update and delete functions. A path traversal vulnerability exists in the crud-file-server node module prior to version 0.9.0, which stems from the program's failure to properly verify the url, and can be exploited by a...

CVE-2018-3733

crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path...

Path traversal

crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path...