CVE-2007-0872 Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
MediumCVSS 5.0
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| plain old webserver | = 0.0.7 | No fix listed |
| plain old webserver | = 0.0.8 | No fix listed |
References
- 33174 vdb-entry
- 20070209 Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension exploit mailing-list
- 20070209 Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension mailing-list
- 24127 third-party-advisory
- 22502 vdb-entry
- ADV-2007-0558 vdb-entry
- addons.mozilla.org
- pow-httprequest-directory-traversal(32467) vdb-entry