CVE-2001-0555

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0750%

EPSS Percentile23.87th

Published2001年8月14日

Last Modified2026年4月16日

Vulnerability Description

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet.

Affected Platforms (CPE)

📦

Screaming Media

Siteware

<= 3.1

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2001-06/0165.html

🔗 http://archives.neohapsis.com/archives/bugtraq/2001-06/0166.html

🔗 http://www.kb.cert.org/vuls/id/795707

🔗 http://www.osvdb.org/13887

🔗 http://www.securityfocus.com/bid/2869

🔗 http://www01.screamingmedia.com/en/security/sms1001.php

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/6689

🔗 http://archives.neohapsis.com/archives/bugtraq/2001-06/0165.html

Vulnerability Description

Affected Platforms (CPE)

Siteware

References & Advisories

相關漏洞威脅