1408 matches found
CVE-2017-16177
chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16139
CVE-2017-16139 affects the jikes file server. The vulnerability is a directory traversal flaw in path resolution that allows an attacker to access the filesystem by placing sequences like "../" in the URL. The initial description notes that accessible files are restricted to those with .htm and ....
CVE-2017-16156
CVE-2017-16156 affects the static file server myprolyz, where a directory traversal flaw allows accessing the filesystem by placing relative paths (e.g., ../ or ../../.. ) in the URL. The vulnerability is demonstrated by examples such as requesting URLs that traverse up the directory tree to reve...
CVE-2017-16161
shenliru, a simple file server, is vulnerable to a directory traversal issue (CVE-2017-16161) where exposing the filesystem is possible by using relative paths like ../ in the URL. The root cause is improper handling of relative path resolution, allowing access to files outside the intended direc...
CVE-2017-16162
Summary: CVE-2017-16162 affects the 22lixian simple file server, where a directory traversal flaw allows an attacker to access the filesystem by sending URLs containing relative paths like "../". The public sources (NVD/CVE, GHSA advisories, Veracode, CNVD, OSV, GitLab/file, npm advisory) describ...
CVE-2017-16170
CVE-2017-16170 affects liuyaserver (a static file server) and is a directory traversal vulnerability exploitable by placing ../ in the URL to access the filesystem. The vulnerability is documented with CVSS metrics (v3 base 7.5, HIGH; NETWORK, LOW complexity) and is referenced across multiple sou...
CVE-2017-16171
CVE-2017-16171 affects hcbserver, a static file server, where a directory traversal vulnerability can be triggered by requesting URLs containing relative paths (e.g., ../) to access files outside the intended directory. Connected sources (GHSA/MWJ7… and OSV, Veracode, CNVD/CNVD-2018‑11655) confir...
CVE-2017-16175
CVE-2017-16175 concerns a vulnerability in the file server ewgaddis.lab6 where a directory traversal flaw allows an attacker to access the filesystem by placing ".." in the URL (e.g., ../../). Connected sources repeatedly state that the vulnerability stems from improper path resolution, enabling ...
CVE-2017-16180
CVE-2017-16180 is a vulnerability in the static file server serverabc where a URL containing directory traversal sequences (e.g., ../) allows attackers to access the host filesystem. Public datasheets describe the issue as a path traversal that can disclose private files (example: GET /../../../....
CVE-2017-16181
CVE-2017-16181 affects the static file server wintiwebdev. The vulnerability is a directory traversal flaw that lets an attacker access the filesystem by requesting URLs containing ../ sequences. This is confirmed across multiple sources (NVD entry for CVE-2017-16181 and related advisories). Impa...
CVE-2017-16183
CVE-2017-16183 affects iter-server, a static file server. The vulnerability is a directory traversal flaw where crafted URLs containing ../ allow access to the filesystem. Examples and descriptions across multiple sources confirm direct path traversal via relative file paths, potentially exposing...
CVE-2017-16186
The CVE CVE-2017-16186 affects 360class.jansenhm, a static file server. A directory traversal flaw allows an attacker to access the host filesystem by crafting URLs containing ../ sequences, enabling potential disclosure of private files. Reported impact supports confidentiality risk (NVD CVSS2/C...
CVE-2017-16193
CVE-2017-16193 affects the static file server mfrs . The vulnerability is a directory traversal flaw where a URL containing "../" (and variants) allows access to files outside the intended root. Public documents confirm the root cause is improper resolution of relative file paths, enabling potent...
CVE-2017-16197
qinserve is a static file server vulnerable to a directory traversal issue. An attacker can access the filesystem by supplying relative paths (e.g., ../../… in the URL). The issue is documented across multiple sources (NVD, GHSA advisory, Veracode, OSV, CNVD, etc.). Impact described as potential ...
CVE-2017-16199
CVE-2017-16199 corresponds to a directory-traversal vulnerability in susu-sum (a static file server). The issue allows an attacker to access files outside the intended directory by crafting URL paths that include traversal sequences (for example ../../../../../../etc/passwd). Multiple connected s...
CVE-2017-16201
The CVE-2017-16201 issue affects zjjserver, a static file server, due to a directory traversal vulnerability where attackers can exploit URL paths containing ../ to access the filesystem. The vulnerability is triggered by how relative paths are resolved, enabling potential disclosure of private f...
CVE-2017-16212
Summary: CVE-2017-16212 affects the static file server named ltt , with a directory traversal vulnerability that can be triggered by including relative paths (e.g., "../../"). Public details in connected advisories (GHSA-5JG5-W395-9684, Veracode, CNVD, etc.) describe that affected versions of ltt...
CVE-2017-16213
CVE-2017-16213 affects the mfrserver file server and is a directory traversal vulnerability. The vulnerability is triggered by crafted URLs containing relative path sequences (e.g., ../) which allow an attacker to access files outside the intended directory root, exposing filesystem contents. Con...
CVE-2017-16221
CVE-2017-16221 concerns the simple file server yzt , where a directory traversal vulnerability allows an attacker to access the filesystem by placing "../" in the URL. The issue stems from how relative file paths are resolved, enabling access to files outside the intended directory root. This vul...
CVE-2017-16211
CVE-2017-16211 concerns the static file server lessindex , which is vulnerable to a directory traversal vulnerability. The underlying issue is that the server resolves relative file paths, allowing an attacker to access the filesystem by injecting sequences like "../" in the URL. This can disclos...