CVE-2010-2078 - DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI

MEDIUM

DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI

Published May 25, 2010

5.0

MEDIUM

CVSS 2.0

EPSS 1.32%

DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
http://cross-site-scripting.blogspot.com/2010/05/datatrack-system-35-persistent-xss.html		x_refsource_MISCExploit
http://packetstormsecurity.org/1005-exploits/datatrackserver35-xss.txt		x_refsource_MISCExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2096		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58734		vdb-entryx_refsource_XF