Path Traversal

360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing .. in the url...

PT-2018-6179

Name of the Vulnerable Software and Affected Versions: static-html-server versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access ...

CVE-2017-16152: Improper Limitation of a Pathname to a Restricted Directory

static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16091: Improper Limitation of a Pathname to a Restricted Directory

xtalk helps your browser talk to nodex, a simple web framework. xtalk is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

PT-2018-6120

Name of the Vulnerable Software and Affected Versions: xtalk versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability in xtalk. This can be achieved by placing "../" in the URL, potentially giving...

PT-2018-6112

Name of the Vulnerable Software and Affected Versions: node-simple-router versions prior to 0.10.1 Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside...

CVE-2017-16083: Improper Limitation of a Pathname to a Restricted Directory

node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16176: Improper Limitation of a Pathname to a Restricted Directory

jansenstuffpleasework is a file server. jansenstuffpleasework is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

PT-2018-6117

Name of the Vulnerable Software and Affected Versions: serverlyr affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside o...

PT-2018-6126

Name of the Vulnerable Software and Affected Versions: tiny-http versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files...

CVE-2017-16097: Improper Limitation of a Pathname to a Restricted Directory

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16036

badjs-sourcemap-server receives files sent by badjs-sourcemap. badjs-sourcemap-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

hftp is a static http or ftp server hftp is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16038

"f2e-server" 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. This is compounded by "f2e-server" requiring elevated privileges to run...

CVE-2017-16036

"badjs-sourcemap-server" receives files sent by "badjs-sourcemap". "badjs-sourcemap-server" is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16038

f2e-server 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. This is compounded by f2e-server requiring elevated privileges to run...

CVE-2017-16039

hftp is a static http or ftp server hftp is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16038

CVE-2017-16038 concerns the f2e-server project: versions 1.12.11 and earlier suffer a directory traversal vulnerability in URL path handling, allowing an attacker to access files outside the intended root by inserting ../../ in the request. The issue arises from insufficient validation of user-su...

CVE-2017-16036: Improper Limitation of a Pathname to a Restricted Directory

badjs-sourcemap-server receives files sent by badjs-sourcemap. badjs-sourcemap-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16038: Improper Limitation of a Pathname to a Restricted Directory

f2e-server 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. This is compounded by f2e-server requiring elevated privileges to run...