[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97147

 
 

909

 
 

78764

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-3306

Date: (C)2010-09-24   (M)2015-12-16 


Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI.

CVSS Score: 5.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 2.9Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: NONE
 Availability: NONE





Reference:
EXPLOIT-DB-14925
SECUNIA-41286
OSVDB-67840
http://www.openwall.com/lists/oss-security/2010/09/17/3
http://www.openwall.com/lists/oss-security/2010/09/17/8
http://code.google.com/p/weborf/source/detail?r=464
http://galileo.dmi.unict.it/wiki/weborf/doku.php?id=news:released_0.12.3

CWE    1
CWE-22

© 2013 SecPod Technologies