| Package | Affected versions | Patched versions |
|---|---|---|
| alchemy eye | = 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6= 2.6.18= 2.6.19= 3.0= 3.0.10 | |
| alchemy network monitor | ≤ 3.0.10 |
Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free