https://www.exploit-db.com/exploits/23864
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200403-094

xweb1.0版本存在目录遍历漏洞。远程攻击者借助RUL中的..（点点）下载任意文件。

source: http://www.securityfocus.com/bid/9937/info

XWeb is reportedly prone to directory traversal attacks. Remote attackers may exploit this issue to gain access to sensitive files outside of the server root. This would occur in the context of the server, i.e.: any files the server could access would also be accessible to the attacker.

http://www.example.com/../../../../etc/passwd

来源:BID
名称:9937
链接:http://www.securityfocus.com/bid/9937
来源:www.autistici.org
链接:http://www.autistici.org/fdonato/advisory/xweb1.0-adv.txt
来源:SECTRACK
名称:1009514
链接:http://securitytracker.com/id?1009514
来源:SECUNIA
名称:11186
链接:http://secunia.com/advisories/11186
来源:BUGTRAQ
名称:20040322directorytraversalinxweb1.0
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=107997946623770&w;=2
来源:XF
名称:xweb-dotdot-directory-traversal(15567)
链接:http://xforce.iss.net/xforce/xfdb/15567
来源:OSVDB
名称:4460
链接:http://www.osvdb.org/4460