Vulnerability Details CVE-2005-1230
Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in a GET request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=111410564915961&w=2
- http://secunia.com/advisories/15052
- http://www.autistici.org/fdonato/advisory/Yawcam0.2.5-adv.txt
- http://www.osvdb.org/15732
- http://marc.info/?l=bugtraq&m=111410564915961&w=2
- http://secunia.com/advisories/15052
- http://www.autistici.org/fdonato/advisory/Yawcam0.2.5-adv.txt
- http://www.osvdb.org/15732
Products affected by CVE-2005-1230
-
cpe:2.3:a:magnus_lundvall:yawcam:0.2.5