Web-APP.Org WebAPP目录遍历漏洞

WebAPP 0.9.9版本存在目录遍历漏洞。远程攻击者借助 viewcat参数的.. (点 点)查看任意文件。

The vendor released an update to address this issue. Please see the references for more information.

来源: SECUNIA
名称: 12373
链接:http://secunia.com/advisories/12373

来源: XF
名称: webapp-dotdot-directory-traversal(17100)
链接:http://xforce.iss.net/xforce/xfdb/17100

来源: BID
名称: 11028
链接:http://www.securityfocus.com/bid/11028

来源: BUGTRAQ
名称: 20040824 WebAPP directory traversal and ability to retrieve the DES encrypted password hash
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109336268002879&w=2

来源: cornerstone.web-app.org
链接:http://cornerstone.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=updates&id=1