Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2002-12-31 | CVE-2002-2240 | Path Traversal vulnerability in Myserver 0.11/0.2 Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP GET request. | 5.0 |
2002-12-31 | CVE-2002-2238 | Path Traversal vulnerability in Kunani Odbc FTP Server 1.0.10 Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in a GET request. | 5.0 |
2002-12-31 | CVE-2002-2233 | Path Traversal vulnerability in Mollensoft Software Enceladus Server Suite 3.9 Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via "@" (at) characters in a CD (CWD) command, such as (1) "@/....\", (2) "@@@/..c:\", or (3) "@/..@/..". | 8.3 |
2002-12-31 | CVE-2002-2229 | Path Traversal vulnerability in Sapio Design LTD Webreflex 1.53 Directory traversal vulnerability in Sapio Design Ltd. | 5.0 |
2002-12-31 | CVE-2002-2154 | Path Traversal vulnerability in Monkey-Project Monkey 0.1.4 Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. | 5.0 |
2001-12-30 | CVE-2001-1205 | Path Traversal vulnerability in Matrixs CGI Vault Last Lines 2.0 Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable. | 5.0 |
2001-12-29 | CVE-2001-1432 | Path Traversal vulnerability in Cherokee Httpd Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. | 7.8 |
2001-10-18 | CVE-2001-0780 | Path Traversal vulnerability in Cosmicperl Directory PRO 2.0 Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. | 5.0 |
2001-02-16 | CVE-2001-0054 | Path Traversal vulnerability in Solarwinds Serv-U File Server 3.0.0.16 Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. | 5.0 |