CVE-2001-1115: Undefined Security Weakness

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...

Обратный путь в директориях SIX-webboard (directory traversal)

Обратный путь в директориях в generate.cgi...

SIX-webboard generate.cgi 'content' Parameter Traversal Arbitrary File Access

The version of the 'generate.cgi' from SIX-webboard installed on the remote web server allows an unauthenticated, remote attacker to access arbitrary files with the privileges of the http daemon due to improper validation of user-supplied input to the 'content' variable of directory traversal...