Lucene search
K

5 matches found

Cvelist
Cvelist
added 2005/05/10 4:0 a.m.13 views

CVE-2003-1166

Directory traversal vulnerability in 1 Openfile.aspx and 2 Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. dot dot in the file parameter...

6.7AI score0.04819EPSS
Exploits1References5
CVE
CVE
added 2005/05/10 4:0 a.m.35 views

CVE-2003-1166

CVE-2003-1166 describes a directory traversal vulnerability in HTTP Commander 4.0. The flaw affects the Openfile.aspx and Html.aspx components, where a .. (dot dot) in the file parameter can be used to view arbitrary files (remote access). Root cause: insufficient validation of the file parameter...

5CVSS7.1AI score0.04819EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2003/12/31 5:0 a.m.7 views

CVE-2003-1166

Directory traversal vulnerability in 1 Openfile.aspx and 2 Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. dot dot in the file parameter...

5CVSS6.7AI score0.04819EPSS
Exploits1References5
exploitpack
exploitpack
added 2003/11/01 12:0 a.m.15 views

http commander 4.0 - Directory Traversal

http commander 4.0 - Directory Traversal source: https://www.securityfocus.com/bid/8948/info It has been reported that HTTP Commander is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '../' character sequences. Successful...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2003/11/01 12:0 a.m.26 views

http commander 4.0 - Directory Traversal

source: https://www.securityfocus.com/bid/8948/info It has been reported that HTTP Commander is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '../' character sequences. Successful exploitation of this vulnerability may allow a...

7.4AI score
Exploits0
Rows per page
Query Builder