Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1)

// source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution for "/" and "". Unauthenticated users may access any known file in the...

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (1)

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 1 // source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution fo...