http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200412-1083

ParaChatServer5.5存在目录遍历漏洞。攻击者可以借助URL中的一个..%5C（十六进制编码点点）读取任意文件。

来源:XF
名称:parachat-directory-traversal(17541)
链接:http://xforce.iss.net/xforce/xfdb/17541
来源:BID
名称:11272
链接:http://www.securityfocus.com/bid/11272
来源:SECUNIA
名称:12678
链接:http://secunia.com/advisories/12678/
来源:BUGTRAQ
名称:20040930Re:directorytraversalinParaChatServer5.5
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=109656982803391&w;=2
来源:BUGTRAQ
名称:20040929directorytraversalinParaChatServer5.5
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=109647769526696&w;=2
来源:OSVDB
名称:10436
链接:http://www.osvdb.org/10436
来源:SECTRACK
名称:1011438
链接:http://securitytracker.com/id?1011438
来源:FULLDISC
名称:20040929Re:directorytraversalinParaChatServer5.5
链接:http://archives.neohapsis.com/archives/fulldisclosure/2004-09/1063.html
来源:FULLDISC
名称:20040928directorytraversalinParaChatServer5.5
链接:http://archives.neohapsis.com/archives/fulldisclosure/2004-09/1047.html