Vulnerabilities > CVE-2001-0555 - Unspecified vulnerability in Screaming Media Siteware

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
screaming-media
exploit available
NVD
Published: 2001-08-14
Updated: 2024-11-20

Summary

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet.

Vulnerable Configurations

Part Description Count
Application
Screaming_Media
1

Exploit-Db

descriptionSiteWare 2.5/3.0/3.1 Editor Desktop Directory Traversal Vulnerability. CVE-2001-0555. Webapps exploit for java platform
idEDB-ID:20925
last seen2016-02-02
modified2001-06-13
published2001-06-13
reporterFoundstone Labs
sourcehttps://www.exploit-db.com/download/20925/
titleSiteWare 2.5/3.0/3.1 Editor Desktop Directory Traversal Vulnerability

References