iWeb Server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to access files outside of the web servers root directory. Successfully exploiting this issue will allow attackers to gain access to sensitive information.

• http://www.ashleybrown.co.uk/iweb/
• http://www.securityfocus.com/bid/37228

---

Updated on 2015-03-25