Cruiseworks 1.09 - Cws.exe Doc Directory Traversal

Cruiseworks 1.09 - Cws.exe Doc Directory Traversal source: https://www.securityfocus.com/bid/20698/info Cruiseworks is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

Cruiseworks 1.09 - Cws.exe Doc Buffer Overflow

Cruiseworks 1.09 - Cws.exe Doc Buffer Overflow source: https://www.securityfocus.com/bid/20699/info Cruiseworks is prone to a remote buffer-overflow vulnerability. Specifically, the application fails to validate input passed to the 'doc' parameter of the '/scripts/cruise/cms.exe' application...