CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

14.97% chance of exploitation in the next 30 days, 96th percentile

Published

2001-07-27

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20925

References

• CVE Record
• NVD entry

Related

• CVE-2001-0554
• CVE-2001-0557
• CVE-2001-0553
• CVE-2001-0558
• CVE-2001-0552
• CVE-2001-0559