Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2005-1366

Disclosure Date: May 16, 2005 (last updated February 22, 2025)
Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.
0
Attacker Value
Unknown

CVE-2005-1367

Disclosure Date: May 16, 2005 (last updated February 22, 2025)
Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.
0
Attacker Value
Unknown

CVE-2005-1365

Disclosure Date: May 16, 2005 (last updated February 22, 2025)
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
0