DirectContact 0.3.b Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16849/info DirectContact is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

CVE-2006-0971

Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. dot dot in the URL...

Directory traversal

Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2006-0971

CVE-2006-0971 describes a directory traversal vulnerability in Lionel Reyero DirectContact 0.3b, enabling remote attackers to read arbitrary files by supplying a .. sequence in the URL. The affected software/version is DirectContact 0.3b (Lionel Reyero). The available connected documents confirm ...

CVE-2006-0971

Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. dot dot in the URL...

directContact03b.txt

Donato Ferrante Application: DirectContact http://reyero.info/dc/ Version: 0.3b Bug: directory traversal Date: 27-Feb-2006 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

directory traversal in DirectContact 0.3b

Donato Ferrante Application: DirectContact http://reyero.info/dc/ Version: 0.3b Bug: directory traversal Date: 27-Feb-2006 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

DirectContact 0.3.b - Directory Traversal

DirectContact 0.3.b - Directory Traversal source: https://www.securityfocus.com/bid/16849/info DirectContact is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...