Path traversal

Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform OCP 2.0 allows remote attackers to list arbitrary directories via a full pathname in the root parameter...

CVE-2008-5997

CVE-2008-5997: Absolute path traversal in Omnicom Content Platform (OCP) 2.0 — vulnerable code path is admin/fileKontrola/browser.asp. The root parameter can be used remotely to enumerate directories. Connected sources confirm the vulnerability and impact (directory listing/CONF disclosure); no e...

omnicom-traverse.txt

================================================================================ |||||||||||||Omnicom Content Platform Local Directory Traversal||||||||||||||||| ================================================================================...