high7.8Public exploit code
CVE-2007-0919
Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MiniWebsvr 0.0.9a - Remote Directory Traversal2008-03-03 · remote · windows · Verified
- MiniWebsvr 0.0.7 - Remote Directory Traversal2007-04-11 · remote · multiple · Verified
Impact
Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nickolas Grigoriadis | Mini Web Server | Version 0.0.6 |
References
- NVD record
- CVE.org record
- http://attrition.org/pipermail/vim/2007-February/001315.html
- http://osvdb.org/33513
- http://securityreason.com/securityalert/2248
- http://www.securityfocus.com/archive/1/459829/100/0/threaded
- http://www.securityfocus.com/bid/22523
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32451
- http://attrition.org/pipermail/vim/2007-February/001315.html
- http://osvdb.org/33513
- http://securityreason.com/securityalert/2248
- http://www.securityfocus.com/archive/1/459829/100/0/threaded
- http://www.securityfocus.com/bid/22523
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32451