CVE

Id
36622  
CVE No.
CVE-2008-6505  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0.x and (2) DefaultStaticContentLoader in 2.1.x.  
Phase
Assigned (20090323)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
399489 36622 CVE-2008-6505 CONFIRM:http://issues.apache.org/struts/browse/WW-2779  View
399490 36622 CVE-2008-6505 CONFIRM:http://struts.apache.org/2.x/docs/s2-004.html  View
399491 36622 CVE-2008-6505 BID:32104  View
399492 36622 CVE-2008-6505 URL:http://www.securityfocus.com/bid/32104  View
399493 36622 CVE-2008-6505 OSVDB:49733  View
399494 36622 CVE-2008-6505 URL:http://osvdb.org/49733  View
399495 36622 CVE-2008-6505 OSVDB:49734  View
399496 36622 CVE-2008-6505 URL:http://osvdb.org/49734  View
399497 36622 CVE-2008-6505 SECUNIA:32497  View
399498 36622 CVE-2008-6505 URL:http://secunia.com/advisories/32497  View
399499 36622 CVE-2008-6505 VUPEN:ADV-2008-3003  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49924 JVNDB-2008-005234 Openfire の SIP プラグインの CallLogDAO における SQL インジェクションの脆弱性 Openfire の SIP プラグインの CallLogDAO には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6509 36622 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005234.html  View