Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read arbitrary files via a .. (dot dot) in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-04-26T19:00:00

Updated: 2024-08-07T13:33:28.622Z

Reserved: 2007-04-26T00:00:00

Link: CVE-2007-2285

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2007-04-26T19:19:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-2285

cve-icon Redhat

No data.