medium5.0Public exploit code
CVE-2009-5114
Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebGlimpse 2.18.7 - 'DOC' Directory Traversal2009-04-17 · webapps · cgi · Verified
Impact
Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the DOC parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iwork | Webglimpse | through 2.18.7 Versions 1.7.6, 1.7.9, 2.0.03, 2.0.04, 2.0.07 |