CVE-2012-1024

Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2012-1024

Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2012-1024

CVE-2012-1024 is a directory-traversal vulnerability in Enigma2 Webinterface (versions 1.5rc1 and 1.5beta4) where an attacker can read arbitrary files by supplying a .. in the file parameter. The issue enables information disclosure via the web interface and is reflected in multiple CVE/OpenVAS r...

Enigma2 'file' Parameter Information Disclosure Vulnerability

Enigma2 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the attacker to obtain sensitive information; other attacks...