Description
Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (hex-encoded dot dot) in the URL.
References
- 20040930 Re: directory traversal in ParaChat Server 5.5 mailing-list
- 12678 third-party-advisory
- 20040928 directory traversal in ParaChat Server 5.5 mailing-list
- 11272 vdb-entry
- 20040929 directory traversal in ParaChat Server 5.5 mailing-list
- 1011438 vdb-entry
- 10436 vdb-entry
- parachat-directory-traversal(17541) vdb-entry
- 20040929 Re: directory traversal in ParaChat Server 5.5 mailing-list