Description
Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters.
References
- webserver-4everyone-encoded-traversal(10373) vdb-entry
- 20021014 DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone third-party-advisory
- 5968 vdb-entry