index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/24987 | exploit vdb entry patch |
http://sourceforge.net/project/shownotes.php?release_id=524378 | patch |
http://secunia.com/advisories/26144 | third party advisory patch vendor advisory |