WS-2023-0125

unilogies/bumsys prior to 2.2.0 is vulnerable to Path Traversal. The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' doubled triple dot slash sequences that can resolve to a location that is outside ...

f2e-server path traversal vulnerability

f2e-server is an HTTP server based on the Node.js platform . A path traversal vulnerability exists in f2e-server version 1.12.11 and earlier. An attacker can exploit this vulnerability by placing a '... /' sequence into a URL to gain access to the file system...

CVE-2005-4457: Undefined Security Weakness

MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via several "..." triple dot sequences in a UID FETCH command...

CVE-2005-1659

Cross-site scripting XSS vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a "..." triple dot followed by an onmouseover event...