Seanox DevWex Windows Binary 1.2002.520 - File Disclosure

Author: Kistler Ueli
type: remote
platform: windows
port: 
date_added: 2002-06-08 
date_updated: 2012-09-26 
verified: 1 
codes: CVE-2002-0946;OSVDB-5048 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/4978/info

The Seanox DevWex Windows binary version is prone to an issue which may cause arbitrary web-readable files to be disclosed to remote attackers. This problem occurs because DevWex does not sufficiently filter '..\' sequences from web requests.

GET /..\..\..\..\anyfile