Vulnerability in Soft Lite Serverworx

CVE-2001-0206

Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request.

EPSS: 0.067 (93.2th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)