CVE-2006-0707

CVE-2006-0707 affects PyBlosxom before 1.3.2. On certain web servers, a crafted HTTP request with multiple leading slashes (PATH_INFO) allows remote attackers to read arbitrary files. The vulnerability stems from how PATH_INFO is interpreted by the application, enabling a path traversal-like acce...

CVE-2006-0707

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / slash characters, which is accessed using the PATHINFO variable...

CVE-2006-0707

Removed by vendor...

CVE-2006-0707: Exposure of Sensitive Information to an Unauthorized Actor

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / slash characters, which is accessed using the PATHINFO variable...

[SA18858] PyBlosxom Arbitrary File Disclosure Vulnerability

TITLE: PyBlosxom Arbitrary File Disclosure Vulnerability SECUNIA ADVISORY ID: SA18858 VERIFY ADVISORY: http://secunia.com/advisories/18858/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: PyBlosxom 1.x...