Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-3972
Description:Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the fileName parameter.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-3972
http://seclists.org/fulldisclosure/2016/Apr/36




© 1998-2025 E-Soft Inc. All rights reserved.