PT-2004-2646 · Webapp · Webapp

Jérôme Athias · Published 2004-08-24 · Updated 2017-07-11 · CVE-2004-1742

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebAPP version 0.9.9

Description A directory traversal issue allows remote attackers to view arbitrary files by using a .. (dot dot) in the viewcat parameter.

Recommendations For WebAPP version 0.9.9, restrict access to the viewcat parameter to minimize the risk of exploitation. Avoid using the viewcat parameter with untrusted input until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-1742

Affected Products

Webapp

References · 7

• 🔥 https://exploit-db.com/exploits/24408 · Exploit
• 🔥 http://secunia.com/advisories/12373 · Exploit
• 🔥 http://securityfocus.com/bid/11028 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1742 · Security Note
• http://cornerstone.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=updates&id=1 · Note
• http://marc.info/?l=bugtraq&m=109336268002879&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17100 · Note