Vulnerability in Pico Server

CVE-2005-1365

Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.

EPSS: 0.120 (95.7th percentile) — read the EPSS interpretation.

Affected products

Pico_server — versions 3.0, 3.0_beta_3, 3.1
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM)