CVE-2017-16193

mfrs is a static file server. mfrs is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16160

CVE-2017-16160 affects the 11xiaoli simple file server. A directory traversal vulnerability exists when a URL containing "../" (or similar path traversal sequences) is requested, enabling an attacker to access filesystem paths outside the intended root. Several connected sources corroborate the i...

CVE-2017-16161

shenliru, a simple file server, is vulnerable to a directory traversal issue (CVE-2017-16161) where exposing the filesystem is possible by using relative paths like ../ in the URL. The root cause is improper handling of relative path resolution, allowing access to files outside the intended direc...

CVE-2017-16140

The CVE-2017-16140 entry concerns lab6.brit95, a file server vulnerable to a directory traversal flaw. The root cause is improper handling of path traversal, allowing an attacker to access the filesystem by including ../ in the URL. Public records (GHSA, OSV, CNVD, CNVD-2018-14250, Veracode, NVD)...

CVE-2017-16120

CVE-2017-16120 concerns the static file server liyujing , which is vulnerable to a directory traversal flaw. An attacker can access filesystem paths by placing relative path components (e.g., ../../) in the URL, potentially exposing private files outside the intended directory root. Affected vers...

CVE-2017-16123

CVE-2017-16123 affects the welcomyzt file server. A directory traversal flaw allows an attacker to access the filesystem by including ../ sequences in the URL, exposing sensitive files. Multiple sources (GitHub advisory GHSA-8FV7-VM2P-5495, OSV, CNVD/CNVD-2018-14369, NVD record) describe the issu...

CVE-2017-16120

liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16123

welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16214

peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16211

CVE-2017-16211 concerns the static file server lessindex , which is vulnerable to a directory traversal vulnerability. The underlying issue is that the server resolves relative file paths, allowing an attacker to access the filesystem by injecting sequences like "../" in the URL. This can disclos...

CVE-2017-16148

The CVE-2017-16148 entry concerns the static file server serve46 . The connected advisories document a directory traversal vulnerability where a URL containing relative path segments (for example, ../../) can cause the server to disclose files outside the intended directory. The vulnerability aff...

CVE-2017-16171

hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16175

CVE-2017-16175 concerns a vulnerability in the file server ewgaddis.lab6 where a directory traversal flaw allows an attacker to access the filesystem by placing ".." in the URL (e.g., ../../). Connected sources repeatedly state that the vulnerability stems from improper path resolution, enabling ...

CVE-2017-16171

CVE-2017-16171 affects hcbserver, a static file server, where a directory traversal vulnerability can be triggered by requesting URLs containing relative paths (e.g., ../) to access files outside the intended directory. Connected sources (GHSA/MWJ7… and OSV, Veracode, CNVD/CNVD-2018‑11655) confir...

CVE-2017-16163

dylmomo is a simple file server. dylmomo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

fancy-server path traversal vulnerability

fancy-server is a static file server. A path traversal vulnerability exists in versions of fancy-server prior to 0.1.4. An attacker can exploit this vulnerability by submitting input e.g. '. /' to read files from other directories...

dgard8.lab6 Directory Traversal Vulnerability

dgard8.lab6 is a static file server. A directory traversal vulnerability exists in dgard8.lab6. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

yttivy directory traversal vulnerability

yttivy is a static file server. A directory traversal vulnerability exists in yttivy. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

PT-2018-16150 · Unknown · Crud-File-Server

Name of the Vulnerable Software and Affected Versions: crud-file-server versions prior to 0.8.0 Description: The issue is related to a lack of validation of file names, leading to a Cross-Site Scripting vulnerability. This is due to insufficient sanitization of filenames when the directory index ...

CVE-2014-10066

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory...