5 lines
No EOL
468 B
Text
5 lines
No EOL
468 B
Text
source: http://www.securityfocus.com/bid/9535/info
|
|
|
|
JBrowser has been reported to be vulnerable to directory traversal vulnerability that may allow a remote attacker to gain access to files readable by the web-server that reside outside of the server root directory. This issue is caused by insufficient sanitization of user specified directory paramemters issued to the 'browser.php' script.
|
|
|
|
http://www.example.org/browser.php?directory=[ATTACKER_SPECIFIED_PATH] |