Simple web-server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks. Simple web-server 1.2 is vulnerable other versions may also be affected.

• http://www.autosectools.com/Advisory/Simple-web-server-1.2-Directory-Traversal-232
• https://www.securityfocus.com/bid/48116

---

Updated on 2017-03-28