CVE-2017-16120

CVE-2017-16120 concerns the static file server liyujing , which is vulnerable to a directory traversal flaw. An attacker can access filesystem paths by placing relative path components (e.g., ../../) in the URL, potentially exposing private files outside the intended directory root. Affected vers...

CVE-2017-16186

360class.jansenhm is a static file server. 360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16120

liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16177

CVE-2017-16177 affects chatbyvista (a file server). The vulnerability is a directory traversal flaw triggered by crafted URLs that include path segments like ../, allowing access to the filesystem outside the intended directory. The CVE entry documents this vulnerability with a medium to high imp...

CVE-2017-16213

CVE-2017-16213 affects the mfrserver file server and is a directory traversal vulnerability. The vulnerability is triggered by crafted URLs containing relative path sequences (e.g., ../) which allow an attacker to access files outside the intended directory root, exposing filesystem contents. Con...

CVE-2017-16148

The CVE-2017-16148 entry concerns the static file server serve46 . The connected advisories document a directory traversal vulnerability where a URL containing relative path segments (for example, ../../) can cause the server to disclose files outside the intended directory. The vulnerability aff...

CVE-2017-16167

yyooopack is a simple file server. yyooopack is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16162

22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16221

yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16190

Details show that the static file server dcdcdcdcdc is affected by a directory traversal vulnerability. An attacker can access the filesystem by placing relative path sequences (e.g., "../" or similar encodings) in the request URL, potentially escaping the intended document root. This is document...

CVE-2017-16190

dcdcdcdcdc is a static file server. dcdcdcdcdc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16223

CVE-2017-16223 affects the static file server nodeaaaaa . The vulnerability is a directory traversal flaw that allows an attacker to access the filesystem by placing "../" in the URL. Multiple sources (NVD entry, GHSA advisory, CNVD, OSV, CNVD) describe that affected versions resolve relative fil...

CVE-2017-16176

The CVE concerns jansenstuffpleasework, a file server, with a directory traversal vulnerability exploitable by placing sequences like ../ in the URL to access the filesystem. Multiple connected sources confirm the issue and demonstrate that affected versions resolve relative file paths, permittin...

CVE-2017-16176

jansenstuffpleasework is a file server. jansenstuffpleasework is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

fancy-server path traversal vulnerability

fancy-server is a static file server. A path traversal vulnerability exists in versions of fancy-server prior to 0.1.4. An attacker can exploit this vulnerability by submitting input e.g. '. /' to read files from other directories...

dgard8.lab6 Directory Traversal Vulnerability

dgard8.lab6 is a static file server. A directory traversal vulnerability exists in dgard8.lab6. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

yttivy directory traversal vulnerability

yttivy is a static file server. A directory traversal vulnerability exists in yttivy. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

PT-2018-16150 · Unknown · Crud-File-Server

Name of the Vulnerable Software and Affected Versions: crud-file-server versions prior to 0.8.0 Description: The issue is related to a lack of validation of file names, leading to a Cross-Site Scripting vulnerability. This is due to insufficient sanitization of filenames when the directory index ...

Directory traversal

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory...

CVE-2014-10066

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory...