CVE-2003-1345 Directory traversal vulnerability in s.dll in WebCollection Plus 5.00 allows remote attackers to view arbitrary files in c:\ via a full pathname in the d parameter.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in s.dll in WebCollection Plus 5.00 allows remote attackers to view arbitrary files in c:\ via a full pathname in the d parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| follett software webcollection plus | = 5.00 | No fix listed |
References
- 20030114 Vulnerability in WebCollection Plus (TM) mailing-list
- 6574 vdb-entry
- webcollection-plus-directory-traversal(11064) vdb-entry