CWE-39: Path Traversal: 'C:dirname'
The product accepts input that contains a drive letter or Windows volume letter ('C:dirname') that potentially redirects access to an unintended location or arbitrary file.
A kind of CWE-36 Absolute Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +23 more +25 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.8 High
- netgain systems enterprise manager This vulnerability allows remote attackers to disclose sensitive information on vulnerable... 7.5 High