CVE-2005-1365

no score yetEPSS 12%

Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.

EPSS: 12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2005-05-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

pico_server:pico_server

References

http://marc.info/?l=full-disclosure&m=111625635716712&w=2
http://sourceforge.net/project/shownotes.php?release_id=327708
http://www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt
http://www.securityfocus.com/bid/13642
http://marc.info/?l=full-disclosure&m=111625635716712&w=2

Check your stack JSON