CVE-2005-4202

MEDIO 5.0CVE-2005-4202 · Published 13/12/2005 · updated 16/06/2026

In breve

CVE-2005-4202 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda logisphere (logisphere).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.4%, superiore al 89.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
logisphere logisphere	`= 0.9.9j`	No fix yet

Description

Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2) "..." (triple dot), and (3) "..//" sequences in the URL, (4) "../" sequences in the source parameter to viewsource.jsp, or (5) "..\" (dot dot backslash) sequences in the NS-query-pat parameter to the search URL. URL.

References

secunia.com/advisories/17989 · Vendor Advisory
ipomonis.com/advisories/logisphere_server.zip
securityfocus.com/bid/15807 · Exploit
vupen.com/english/advisories/2005/2840
exchange.xforce.ibmcloud.com/vulnerabilities/23552

Altre vulnerabilità di logisphere

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free