CVE-2013-4413

The Wicked gem for Ruby is affected by a directory traversal in controller/concerns/render_redirect.rb before version 1.0.1, where an attacker can read arbitrary files by sending a URL with encoded "../" sequences (via the_step parameter). Impact is reading arbitrary files; no exploitation detail...

CVE-2013-4413

Directory traversal vulnerability in controller/concerns/renderredirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers to read arbitrary files via a %2E%2E%2F encoded dot dot slash in the step...

PT-2014-2784

Name of the Vulnerable Software and Affected Versions Wicked gem versions prior to 1.0.1 Description The issue allows remote attackers to read arbitrary files via a %2E%2E%2F encoded dot dot slash in the step, due to a directory traversal vulnerability in controller/concerns/render redirect.rb. A...

CVE-2013-4413: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in controller/concerns/renderredirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers to read arbitrary files via a %2E%2E%2F encoded dot dot slash in the step...

Wicked Gem for Ruby contains a flaw

Wicked Gem for Ruby contains a flaw that is due to the program failing to properly sanitize input passed via the 'thestep' parameter upon submission to the renderredirect.rb script. This may allow a remote attacker to gain access to arbitrary files...

Pagetool CMS <= 1.07 (pt_upload.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Pagetool CMS = 1.07 ptupload.php Remote File Include Vulnerability ====================================================================== !usr/bin/perl use...