4
CVSSv2

CVE-2012-5335

Published: 08/10/2012 Updated: 29/08/2017
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 405
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the URI of an HTTP request.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

saurabh gupta tiny server 1.1.5

Exploits

#!/usr/bin/perl -w #Title : Tiny Server v115 Arbitrary File Disclosure Exploit #Author : KaHPeSeSe #Test : PERFECT XP PC1 / SP3 #Date : 15/03/2012 #Thanks : exploit-dbcom use LWP::Simple; use LWP::UserAgent; system('color','A'); system('cls'); print "\n\t____________________________________________________________________\n"; pr ...