Unrated severityNVD Advisory· Published Sep 24, 2010· Updated Jun 16, 2026
CVE-2010-3306
CVE-2010-3306
Description
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:salvo_g._tomaselli:weborf:*:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:salvo_g._tomaselli:weborf:*:*:*:*:*:*:*:*range: <=0.12.2
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.11:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.12:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:salvo_g._tomaselli:weborf:0.9:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- galileo.dmi.unict.it/wiki/weborf/doku.phpnvdPatch
- www.exploit-db.com/exploits/14925/nvdExploit
- secunia.com/advisories/41286nvdVendor Advisory
- code.google.com/p/weborf/source/detailnvd
- www.openwall.com/lists/oss-security/2010/09/17/3nvd
- www.openwall.com/lists/oss-security/2010/09/17/8nvd
- www.osvdb.org/67840nvd
News mentions
0No linked articles in our index yet.