Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in the Pasta parameter when link=util, acao=ftp, and acaba=sim.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1016421 |
Configurations
Information
Published : 2006-07-10 15:05
Updated : 2008-09-05 14:07
NVD link : CVE-2006-3488
Mitre link : CVE-2006-3488
JSON object : View
CWE
Products Affected
virtuastore
- virtuastore