Описание
Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or ".." sequences in commands such as (1) dir or (2) put.
Ссылки
- Exploit
- Exploit
- Exploit
- Exploit
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:digicraft_software:yak:2.0:*:*:*:*:*:*:*
cpe:2.3:a:digicraft_software:yak:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:digicraft_software:yak:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:digicraft_software:yak:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:digicraft_software:yak:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:digicraft_software:yak:2.1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.08097
Низкий
6.4 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or "..\" sequences in commands such as (1) dir or (2) put.
EPSS
Процентиль: 94%
0.08097
Низкий
6.4 Medium
CVSS2
Дефекты
NVD-CWE-Other