20010212 PALS Library System "show files" Vulnerability and remote command executionmailing list
http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html CVE-2001-0217
PALS Library System WebPALS 1.0 - pals-cgi Traversal Arbitrary File Read
Record summary
CVE-2001-0217 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPALS Library System WebPALS 1.0 - pals-cgi Traversal Arbitrary File ReadExploitDB exploitby cuctemaNot analyzed1 file
References
42372vdb entry
http://www.securityfocus.com/bid/2372 webpals-library-cgi-url(6102)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6102 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0217