Directory traversal

2007-03-1301:19:00

PRIOn knowledge base

www.prio-n.com

AI Score

7.1

Confidence

Low

EPSS

0.014

Percentile

86.5%

JSON

Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the pdf_file parameter.

References

securityreason.com/securityalert/2410

www.securityfocus.com/archive/1/462577/100/0/threaded

www.securityfocus.com/bid/22921

www.exploit-db.com/exploits/3458