CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 7.8
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: /cgi-bin/wapopen in boa webserver 0.94.14rc21 allows the injection of "../.." using the filecamera variable (sent by get) to read files with root privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/NONE/NONE
Published Date: 2017-06-24
Last Modified Date: 2019-04-18