St Module Directory Traversal Vulnerability
BID:67389
Info
St Module Directory Traversal Vulnerability
| Bugtraq ID: | 67389 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-3744 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 06 2014 12:00AM |
| Updated: | May 16 2014 01:02AM |
| Credit: | Isaac Schlueter |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
St Module Directory Traversal Vulnerability
St Module is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks.
Version prior to St 0.2.5 are vulnerable.
St Module is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks.
Version prior to St 0.2.5 are vulnerable.
Exploit / POC
St Module Directory Traversal Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
St Module Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
St Module Directory Traversal Vulnerability
References:
References: