CVE-2007-0919

EPSS 3.6%

Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/3708unverified exploitdbwww.exploit-db.com/exploits/5212unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://attrition.org/pipermail/vim/2007-February/001315.html http://osvdb.org/33513 http://securityreason.com/securityalert/2248 https://exchange.xforce.ibmcloud.com/vulnerabilities/32451 http://www.securityfocus.com/archive/1/459829/100/0/threaded http://www.securityfocus.com/bid/22523