medium5.0
CVE-2010-3487
Directory traversal vulnerability in YelloSoft Pinky 1.0 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
Impact
Directory traversal vulnerability in YelloSoft Pinky 1.0 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yellosoft | Pinky | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1009-exploits/pinky10-traversal.txt
- http://secunia.com/advisories/41538
- http://www.johnleitch.net/Vulnerabilities/Pinky.1.0.Directory.Traversal/42
- http://www.osvdb.org/68141
- http://packetstormsecurity.org/1009-exploits/pinky10-traversal.txt
- http://secunia.com/advisories/41538
- http://www.johnleitch.net/Vulnerabilities/Pinky.1.0.Directory.Traversal/42
- http://www.osvdb.org/68141