admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-07 05:26:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2011/CVE-2011-0049.md
0xMarcio d6bcaa53f2 Update CVE sources 2024-07-25 21:25
2024-07-25 21:25:12 +00:00

918 B
Raw Blame History

CVE-2011-0049

Description

Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj_wwwusr in the web interface.

POC

Reference

Github