7 lines
No EOL
364 B
Text
7 lines
No EOL
364 B
Text
source: http://www.securityfocus.com/bid/10495/info
|
|
|
|
Roundup is prone to a remote file disclosure vulnerability. A remote user can disclose files on a vulnerable computer by using the /home/@@file/ prefix and '../' directory traversal sequences.
|
|
|
|
This vulnerability affects Roundup 0.6.11 and prior versions.
|
|
|
|
GET /cit/@@file/../../../../etc/passwd HTTP/1.0 |