CVE-2005-0950

EPSS 3.6%

Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\ (dot dot backslash) in the URL.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/25319unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=111213034206802&w=2 http://secunia.com/advisories/14743 http://securitytracker.com/id?1013596 https://exchange.xforce.ibmcloud.com/vulnerabilities/19900 http://www.autistici.org/fdonato/advisory/FastStone4in1Browser1.2-adv.txt http://www.securityfocus.com/bid/12937