7 lines
No EOL
380 B
Text
7 lines
No EOL
380 B
Text
source: https://www.securityfocus.com/bid/7308/info
|
|
|
|
A vulnerability has been reported for QuickFront that will result in the disclosure of sensitive system resources to remote attackers.
|
|
|
|
QuickFront does not properly sanitize user-supplied input. Specifically, directory traversal sequences such as '../' to HTTP requests are not removed.
|
|
|
|
http://<target>/../../../../../boot.ini |