CVE-2007-3692

Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. dot dot in the name parameter...

CVE-2007-3692

Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. dot dot in the name parameter...

CVE-2007-3692

The CVE-2007-3692 issue concerns EZFactory KDDI Download CGI 1.x, where the download.cgi component is vulnerable to a directory traversal via the name parameter containing .., enabling remote attackers to read/download arbitrary server files. The JVN entry for KDDI’s EZFactory sample CGI download...