vendor:
WebSPIRS
by:
SecurityFocus
4.3
CVSS
MEDIUM
Remote File Access
22
CWE
Product Name: WebSPIRS
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2001
SilverPlatter WebSPIRS Remote File Access Vulnerability
A remote user could gain read access to known files outside of the root directory where SilverPlatter WebSPIRS resides. Requesting a specially crafted URL composed of '../' sequences along with the known filename will disclose the requested file.
Mitigation:
Restrict access to the webspirs.cgi file and ensure that the root directory is not accessible from the web.
