CVE-2017-16101

serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16139

jikes is a file server. jikes is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible files are restricted to files with .htm and .js extensions...

CVE-2017-16123

welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16163

dylmomo is a simple file server. dylmomo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16120

liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16214

CVE-2017-16214 affects the static file server peiserver . The issue is a directory traversal flaw: an attacker can access the filesystem by placing "../" in the URL. Documented in NVD and echoed by multiple advisories (e.g., GHSA-74F5-4M28-GQ5C, Veracode, NODEJS advisory 420). Impact is potential...

CVE-2017-16210

CVE-2017-16210 affects the static file server jn_jj_server. The vulnerability is a directory traversal flaw: an attacker can craft URLs (e.g., using ../../.. ) to access files outside the intended root, potentially disclosing private files. Some advisories (GHSA, OSV, Veracode) note no patch is a...

CVE-2017-16200

uv-tj-demo is a static file server. uv-tj-demo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16197

qinserve is a static file server vulnerable to a directory traversal issue. An attacker can access the filesystem by supplying relative paths (e.g., ../../… in the URL). The issue is documented across multiple sources (NVD, GHSA advisory, Veracode, OSV, CNVD, etc.). Impact described as potential ...

CVE-2017-16173

utahcityfinder constructs lists of Utah cities with a certain prefix. utahcityfinder is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16144

myserver.alexcthomas18 is a file server. myserver.alexcthomas18 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16222

elding is vulnerable to a directory traversal issue in its URL handling that resolves relative paths, allowing an attacker to access files outside the intended directory root. The vulnerability only affects files with extensions; for example, requests like GET /../../../etc/passwd/index.js can le...

CVE-2017-16214

peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16150

wanggoujing123 is a simple webserver. wanggoujing123 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16201

The CVE-2017-16201 issue affects zjjserver, a static file server, due to a directory traversal vulnerability where attackers can exploit URL paths containing ../ to access the filesystem. The vulnerability is triggered by how relative paths are resolved, enabling potential disclosure of private f...

CVE-2017-16175

CVE-2017-16175 concerns a vulnerability in the file server ewgaddis.lab6 where a directory traversal flaw allows an attacker to access the filesystem by placing ".." in the URL (e.g., ../../). Connected sources repeatedly state that the vulnerability stems from improper path resolution, enabling ...

CVE-2017-16194

Picard (a Node.js micro framework) is vulnerable to a directory traversal flaw: an attacker can access the filesystem by including ../ in the URL. The issue is documented across multiple sources (GHSA/NPM advisory, Veracode, CNVD, OSV, etc.), with no patch available in the advisories and recommen...

CVE-2017-16085

CVE-2017-16085 affects the tinyserver2 static-file webserver. The vulnerability is a directory traversal flaw exposed by requests that use path components like "../../" in the URL, allowing an attacker to access files outside the intended document root. Impact is partial confidentiality (filesyst...

CVE-2017-16221

yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Wind-mvc directory traversal vulnerability

wind-mvc is an mvc framework. A directory traversal vulnerability exists in wind-mvc. An attacker can exploit this vulnerability by placing ". /" in a URL to access the file system...