← back
CVE-2001-0555

CVE-2001-0555

EPSS 15.0%
ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/20925unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2001-06/0165.htmlhttp://archives.neohapsis.com/archives/bugtraq/2001-06/0166.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/6689http://www01.screamingmedia.com/en/security/sms1001.phphttp://www.kb.cert.org/vuls/id/795707http://www.osvdb.org/13887http://www.securityfocus.com/bid/2869