Описание
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2005-2952
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22249
- http://marc.info/?l=bugtraq&m=112662785418368&w=2
- http://secunia.com/advisories/16796
- http://securityreason.com/securityalert/4
- http://www.h4cky0u.org/advisories/HYA-2005-007-subscribe-me-pro.txt
- http://www.securityfocus.com/bid/14817
EPSS
Процентиль: 88%
0.03628
Низкий
CVE ID
Связанные уязвимости
nvd
почти 21 год назад
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
EPSS
Процентиль: 88%
0.03628
Низкий