Miniwebsvr web server directory traversal
Published:		13.02.2007
Source:		BUGTRAQ
SecurityVulns ID:		7218
Type:		remote
Level:		4/10
Description:		It's possible to retrieve parent directory listing with /..%00 request.

Affected:		MINIWEBSVR : Miniwebsvr 0.0
CVE:		CVE-2007-0919 (Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI.)

Original document

Daniel Nyström, Miniwebsvr 0.0.6 - Directory traversal (13.02.2007)

Files:		Exploits MiniWebsvr 0.0.7 Directory transversal vulnerability
Discuss:		Read or add your comments to this news (0 comments)