Caucho Technology : Security Vulnerabilities, CVEs, Published In 2006 (Directory traversal)
Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter. NOTE: this issue can produce resultant path disclosure when the parameter is invalid.
Max CVSS
5.0
EPSS Score
0.66%
Published
2006-05-17
Updated
2017-07-20
Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL.
Max CVSS
7.8
EPSS Score
0.72%
Published
2006-05-17
Updated
2018-10-18
2 vulnerabilities found