2 matches found
f2e-server path traversal vulnerability
f2e-server is an HTTP server based on the Node.js platform . A path traversal vulnerability exists in f2e-server version 1.12.11 and earlier. An attacker can exploit this vulnerability by placing a '... /' sequence into a URL to gain access to the file system...
CVE-2005-1659
Cross-site scripting XSS vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a "..." triple dot followed by an onmouseover event...