Description
Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows system files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Genivia | Crystal Live HTTP Server | 6.01 | — |
References
- ExploitDB-47666 exploit
- Vendor Homepage product
- Archived Software Product Page product
- VulnCheck Advisory: Genivia Crystal Live HTTP Server 6.01 - 'Crystal Live HTTP Server' Path Traversal third-party-advisory