CVE-2004-1857

HP Web Jetadmin 7.x (tested on v7.5.2546) is affected by a directory traversal vulnerability in the setinfo.hts script, exploitable via the setinclude parameter to read arbitrary files outside the web root. This requires a remote authenticated attacker to trigger the flaw. No explicit fix/version...

CVE-2004-1857: Undefined Security Weakness

Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. dot dot in the setinclude parameter...