Vulnerability in Particle Soft Links
CVE-2006-2902
Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".." sequences in an HTTP request. NOTE: it is not clear whether this issue is legitimate, as the original researcher seems unsure.
EPSS: 0.015 (71.1th percentile) — read the EPSS interpretation.
Affected products
- Particle_soft Particle_links — versions 1.2.2
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)