Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[EN] securityvulns.ru
no-pyccku

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published: 20.10.2009
Source:
SecurityVulns ID: 10334
Type: remote
Level: 5/10
Description: PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

CVE: CVE-2009-1479 (Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.)

Original document Axel Neumann, [CVE-2009-1479] Boxalino - Directory Traversal Vulnerability (20.10.2009)

Discuss: Read or add your comments to this news (0 comments)

test server