CVE-2011-4716 – DreamBox DM800 - Arbitrary File Download

https://notcve.org/view.php?id=CVE-2011-4716

Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter. Vulnerabilida de salto de directorio en archivo en DreamBox DM800 v1.6rc3, v1.5rc1 y anteriores, permite a atacantes remotos leer archivos de su elección a través del parámetro file. • https://www.exploit-db.com/exploits/17422 https://www.exploit-db.com/exploits/18079 https://www.exploit-db.com/exploits/36286 http://www.exploit-db.com/exploits/18079 http://www.securityfocus.com/bid/50520 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •