vendor:
NVMS-1000
by:
Numan Türle
7.5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: NVMS-1000
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows
2019
NVMS-1000 – Directory Traversal
A directory traversal vulnerability exists in NVMS-1000, which allows an attacker to access sensitive files outside of the web root directory. By sending a specially crafted HTTP request, an attacker can traverse the directory structure and access files outside of the web root directory. This can lead to information disclosure, such as the contents of the Windows win.ini file.
Mitigation:
Ensure that user input is validated and filtered to prevent directory traversal attacks.
