CVE-2012-5100

Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a 1 ..%5c dot dot encoded backslash or 2 %2e%2e%5c encoded dot dot backslash in the PATHINFO...

CVE-2012-5100

The CVE-2012-5100 entry concerns HServer 0.1.1, where a directory traversal flaw allows remote attackers to read arbitrary files via PATH_INFO (specifically dot-dot encoded backslashes, e.g., ..\ or %2e%2e). The vulnerability is a server-side path traversal issue, enabling access to files outside...

CVE-2012-5100

Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a 1 ..%5c dot dot encoded backslash or 2 %2e%2e%5c encoded dot dot backslash in the PATHINFO...

HServer 0.1.1 - Directory Traversal

HServer 0.1.1 - Directory Traversal source: https://www.securityfocus.com/bid/51286/info HServer web server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input submitted to its web interface. Exploiting this issue will allow an attacker to...