An Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted file in the ATService path. .
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
Link | Tags |
---|---|
https://github.com/M507/Miner | third party advisory exploit |
https://www.exploit-db.com/exploits/49549 | exploit vdb entry third party advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/196532 | vdb entry third party advisory |