medium5.0Public exploit code
CVE-2009-3561
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the cur…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal2009-09-18 · remote · multiple · Verified
Impact
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xerver | Xerver | Version 4.32 |