← Back

Serverkit

serverkit

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Shttp
shttp
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-5685
1Serverkit
1Shttp
Apr 23, 2026
Oct 28, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or b...Show more
The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the directory tree.Show less