Description
PCViewer vt1000 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting relative path sequences in GET requests. Attackers can use path traversal sequences ../../../../../../../../../../../../etc/passwd to access sensitive system files outside the intended directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PCViewer | PCViewer | vt1000 | — |
References
- ExploitDB-45248 exploit
- Product Reference product
- VulnCheck Advisory: PCViewer vt1000 Directory Traversal via GET Request third-party-advisory