Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2020/09/01 4:52 p.m.19 views

Directory Traversal in serverwg

serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Example request: http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo and response: HTTP/1.1 200 OK Date: Wed, 17 May...

7.5CVSS7.1AI score0.00533EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2020/09/01 4:52 p.m.16 views

GHSA-2F29-PMPX-VJ62 Directory Traversal in serverwg

serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Example request: http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo and response: HTTP/1.1 200 OK Date: Wed, 17 May...

7.5CVSS7.5AI score0.00533EPSS
Exploits1References3
CNVD
CNVD
added 2018/06/29 12:0 a.m.1 views

Serverwg Directory Traversal Vulnerability

serverwg is an http server. A directory traversal vulnerability exists in serverwg. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

7.5CVSS7.6AI score0.00533EPSS
Exploits1References1
Veracode
Veracode
added 2018/06/07 4:0 p.m.15 views

Directory Traversal

serverwg is vulnerable to directory traversal attacks. The attack is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

7.5CVSS7.3AI score0.00533EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2018/06/07 2:29 a.m.9 views

CVE-2017-16101

serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

7.5CVSS7.5AI score0.00533EPSS
Exploits1References2
Prion
Prion
added 2018/06/07 2:29 a.m.7 views

Directory traversal

serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

5CVSS7.4AI score0.00533EPSS
Exploits1References2
CVE
CVE
added 2018/06/07 2:0 a.m.46 views

CVE-2017-16101

CVE-2017-16101 concerns the lightweight HTTP server serverwg , which is vulnerable to a directory-traversal flaw triggered by URL paths containing sequences like ".. /". The issue allows an attacker to access the filesystem, as demonstrated by examples in multiple sources (e.g., the /../../…/etc/...

7.5CVSS7.4AI score0.00533EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2018/06/07 2:0 a.m.10 views

CVE-2017-16101

serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

7.4AI score0.00533EPSS
Exploits1References2
Rows per page
Query Builder