medium4.3Public exploit code
CVE-2012-4680
Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, all…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IOServer 1.0.18.0 - Directory Traversal2012-08-20 · webapps · windows
Impact
Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in a URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ioserver | Ioserver | Version 1.0.18.0 |