2 matches found
CVE-2011-4696: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. dot dot in the filesignature in a GetPhotoStatus request...
4.3CVSS6AI score0.00786EPSS
SaveExploits1References2
PT-2014-2176
Name of the Vulnerable Software and Affected Versions Eye-Fi Helper versions prior to 3.4.23 Description A directory traversal issue allows man-in-the-middle attackers to create arbitrary files by including a .. dot dot in the filesignature in a "GetPhotoStatus" request. Recommendations For...
4.3CVSS0.00786EPSS
SaveExploits1References4
20