CVE-2010-3306: Salvo G. Tomaselli Weborf

Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI.

Affected products

• Salvo G. Tomaselli Weborf: up to and including 0.12.2; version 0.3 only; version 0.4 only; version 0.5 only; version 0.6 only; version 0.7 only; …

Published 2010-09-24. Last modified 2026-06-16.