Vulnerability Category — Path Traversal

Chinese name:
目录穿越
CVE ID：
22
Detail：
目录穿越的目的旨在访问存在在网站根目录外面的文件或目录。通过浏览应用，攻击者可以寻找存储在 Web 服务器上的其他文件的相对路径。

Related Vulnerabilities

SSV ID Name
SSV-99859 Splunk Enterprise路径穿越漏洞（CVE-2024-36991）
SSV-99842 Sonatype Nexus Repository 3路径遍历漏洞（CVE-2024-4956）
SSV-99820 Confluence Data Center and server Path Traversal漏洞(CVE-2024-21677)
SSV-99713 Ghost 目录穿越漏洞(CVE-2023-32235)
SSV-99707 traggo server 目录穿越漏洞（CVE-2023-34843）
SSV-99639 VMware vRealize Log Insight远程命令执行漏洞（CVE-2022-31706）
SSV-99620 Alist 目录穿越漏洞（CVE-2022-45969）
SSV-99598 Zimbra 远程代码执行漏洞( CVE-2022-41352)
SSV-99528 Zimbra 路径穿越漏洞(CVE-2022-27925)
SSV-99522 Vite 路径穿越漏洞
SSV-99409 ecology filedownload 目录穿越漏洞
SSV-99364 Apache HTTPd 多个路径穿越与命令执行漏洞（CVE-2021-41773 CVE-2021-42013）
SSV-99241 Ivanti Avalanche目录遍历漏洞
SSV-99041 Citrix XenMobile Server路径遍穿越漏洞（CVE-2020-8209）
SSV-98178 Multiple Unauthenticated Vulnerabilities in PolarRx5 GNSS Receiver
SSV-98166 Symmetricom SyncServer S100/S200/S250/S300/S350 - Path Transversal - (CVE-2020-9029/CVE-2020-9030/CVE-2020-9031/CVE-2020-9032/CVE-2020-9033)
SSV-97995 WebPort 1.19.1 目录穿越
SSV-97918 Confluence 目录穿越漏洞(CVE-2019-3398)
SSV-97904 MikroTik RouterOS Authenticated Directory Traversal
SSV-97883 Jfinal cms Background directory traversal
SSV-97838 OFCMS Background Directory Traversal Vulnerability
SSV-97708 GitLab 模版 API 目录遍历漏洞 (CVE-2018-19856)
SSV-97688 Zyxel VMG1312-B10D 5.13AAXA.8 Directory Traversal
SSV-97648 Apache Tomcat JK (mod_jk) Connector path traversal(CVE-2018-11759)
SSV-97546 Cisco Data Center Network Manager Authenticated Path Traversal
SSV-97487 Android: directory traversal over USB via injection in blkid output(CVE-2018-9445)
SSV-97483 Directory Traversal with Spring MVC on Windows(CVE-2018-1271)
SSV-97368 Cisco Adaptive Security Appliance - Path Traversal (CVE-2018-0296)
SSV-97349 Unauthenticated Privileged Directory Traversal in IPConfigure Orchid Core VMS(CVE-2018-10956)
SSV-97241 Server Directory Traversal at Huawei HG255s(CVE-2017-17309)
SSV-97051 ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability
SSV-97002 Outlook for Android: Directory Traversal in Attachment Download
SSV-96966 Emby MediaServer 3.2.5 Directory Traversal File Disclosure Vulnerability
SSV-96955 OV3 Online Administration 3.0 Parameter Traversal Arbitrary File Access
SSV-96944 Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal
SSV-96932 Claymore's Dual Ethereum Miner Path Traversal(CVE-2017-16929)
SSV-96910 WordPress Plugin WooCommerce 2.0/3.0 - Directory Traversal(CVE-2017-17058)
SSV-96882 Cambium Multiple Vulnerabilities
SSV-96847 DALIM SOFTWARE ES Core 5.0 build 7184.1 - Directory Traversal
SSV-96844 Automated Logic WebCTRL 6.1 Path Traversal Arbitrary File Write
SSV-93066 Ruby on Rails 'implicit render' functionality Directory Traversal Vulnerability (CVE-2014-0130)
SSV-92981 Trend Micro Threat Discovery Appliance <= 2.6.1062r1 logoff.cgi Directory Traversal Authentication Bypass Vulnerability（CVE-2016-7552）
SSV-92915 Apache Tomcat Directory/Path Traversal
SSV-92833 Miele Professional PG 8528 - Web Server Directory Traversal（CVE-2017-7240）
SSV-92822 OpenSSH on Cygwin: directory traversal in SFTP client
SSV-92540 Apache Shiro远程安全限制绕过漏洞（CVE-2016-6802）
SSV-92524 GNU tar（POINTYFEATHER） 解压路径绕过漏洞
SSV-92344 WordPress 4.5 admin-ajax.php Path traversal & DoS
SSV-91726 Atlassian Confluence <= 5.3 Path Transversal
SSV-91414 Serv-U FTP Server 7.3 Remote Directory Traversal Vulnerability
SSV-91154 Honeywell FALCON XLWeb FTP服务器跨目录漏洞
SSV-90920 Apache Jetspeed 目录穿越漏洞
SSV-90080 Belkin N150 无线路由器目录穿越漏洞
SSV-90017 霍尼韦尔Midas气体检测器路径遍历漏洞
SSV-89561 pluck CMS 4.7.2 Path Traversal
SSV-89541 Konica Minolta FTP Utility 1.0 - 目录穿越漏洞
SSV-89539 F5 BIG-IP 10.1.0 - Directory Traversal Vulnerability
SSV-89443 F5 BIG-IP 10.1.0 - Directory Traversal Vulnerability
SSV-89395 Linksys EA2700 apply.cgi 目录穿越
SSV-89331 YesWiki 0.2 /wakka.php Path Traversal Vulnerability
SSV-89234 烽火（Fiberhome）HG-110 设备目录穿越漏洞
SSV-87398 Progress OpenEdge 11.2 - Directory Traversal
SSV-87374 Dell EqualLogic Storage - Directory Traversal
SSV-87279 Glype 1.4.9 - Cookie Injection Path Traversal LFI
SSV-87276 webEdition 6.3.8.0 (SVN-Revision: 6985) - Path Traversal
SSV-88847 DevExpress 13.2.8 /FileManagerComponent.aspx 目录穿越漏洞
SSV-87172 Photo WiFi Transfer 1.01 - Directory Traversal Vulnerability
SSV-87104 Conceptronic Grab’n’Go Network Storage Directory Traversal
SSV-87995 PHP <5.2.6 posix_access()函数服务控制绕过漏洞
SSV-87713 apache 1.3.20 目录穿越
SSV-87564 Tomcat 6.0.16 UTF-8 目录穿越漏洞
SSV-87960 Tomcat RequestDispatcher 目录穿越漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. 简体中文