Description
Directory traversal vulnerability in MetaGauge 1.0.0.17, and probably other versions before 1.0.3.38, allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in the URL.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45697 ↗
- http://www.securityfocus.com/archive/1/497039/100/0/threaded ↗
- http://www.vupen.com/english/advisories/2008/2747 ↗
- http://secunia.com/advisories/32094 ↗
- http://securityreason.com/securityalert/4360 ↗
- https://www.exploit-db.com/exploits/6686 ↗
- http://www.securityfocus.com/bid/31596 ↗