Description

Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.

Remediation

References

CVE-2006-0847

Related Vulnerabilities

Internet Information Services Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2003-1582)

Python Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4944)

WordPress Plugin WP Comment Remix SQL Injection and HTML Injection Vulnerabilities (1.4.3)

WordPress Plugin Slideshow Gallery LITE Multiple Cross-Site Scripting Vulnerabilities (1.6.5)

WordPress Plugin DP Maintenance Mode Lite Cross-Site Scripting (1.3.2)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-0847