Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (3)

Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 3 // source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution fo...

Hassan Consulting Shopping Cart 1.18 - Directory Traversal

Hassan Consulting Shopping Cart 1.18 - Directory Traversal source: https://www.securityfocus.com/bid/1777/info The $page variable in Hassan Consulting Shopping Cart does not properly check for insecure relative paths such as the double dot "..". Therefore, requesting the following URL will displa...

AnalogX SimpleServer:WWW 1.0.6 - Directory Traversal

AnalogX SimpleServer:WWW 1.0.6 - Directory Traversal source: https://www.securityfocus.com/bid/1508/info Requesting a specially formed url containing encoding %2E to SimpleServer 1.06 and possibley earlier versions, will enable a remote user to gain read access to known files above the SimpleServ...

CVE-1999-0229

CVE-1999-0229 describes a Denial of Service targeting Windows NT Internet Information Services (IIS) servers, through crafted requests that traverse directories (e.g., ../../). Several connected sources tie the issue to Microsoft IIS <= 2.0 and label it a GET request DoS vulnerability, implyin...

teamshare teamtrack 3.0 - Directory Traversal

source: https://www.securityfocus.com/bid/689/info TeamTrack 3.00 has a built-in webserver which is meant to be used during the evaluation period, or until IIS or Netscape Enterprise/FastTrack is installed. This server does not filter out requested paths containing the ../ sequence. Because of...