Описание
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2005-2952
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22249
- http://marc.info/?l=bugtraq&m=112662785418368&w=2
- http://secunia.com/advisories/16796
- http://securityreason.com/securityalert/4
- http://www.h4cky0u.org/advisories/HYA-2005-007-subscribe-me-pro.txt
- http://www.securityfocus.com/bid/14817
EPSS
Процентиль: 94%
0.13111
Средний
CVE ID
Связанные уязвимости
nvd
больше 20 лет назад
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
EPSS
Процентиль: 94%
0.13111
Средний