3 matches found
PT-2006-4252 · Phpsysinfo · Phpsysinfo
Name of the Vulnerable Software and Affected Versions: phpSysInfo versions 2.5.1 through 3.2.4 Description: The issue allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter. This will display a different...
CVE-2001-1196
CVE-2001-1196 concerns Webmin 0.91, where a directory traversal flaw in edit_action.cgi could allow privilege escalation via a .. argument. The vulnerability is documented with a high-severity score (CVSS v2: HIGH, base 10.0) and is referenced by multiple sources. A remediation available in the c...
CVE-1999-0495
CVE-1999-0495 describes a remote path traversal vulnerability where an attacker can access a file system by using .. (dot dot) when interacting with SMB shares. The underlying cause is directory traversal over SMB, enabling disclosure or modification of sensitive data with complete impact on conf...