5 lines
No EOL
326 B
Text
Executable file
5 lines
No EOL
326 B
Text
Executable file
source: http://www.securityfocus.com/bid/4978/info
|
|
|
|
The Seanox DevWex Windows binary version is prone to an issue which may cause arbitrary web-readable files to be disclosed to remote attackers. This problem occurs because DevWex does not sufficiently filter '..\' sequences from web requests.
|
|
|
|
GET /..\..\..\..\anyfile |