{"uuid": "0de2b3e7-5786-4fac-88bf-c5a262a13ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17662", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/thinvnc_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"jinxbox\", \"WarMarX\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a directory traversal vulnerability in ThinVNC\\n          versions 1.0b1 and prior which allows unauthenticated users to retrieve\\n          arbitrary files, including the ThinVNC configuration file.\\n\\n          This module has been tested successfully on ThinVNC versions 1.0b1\\n          and \\\"ThinVNC_Latest\\\" (2018-12-07).\", \"disclosure_date\": \"2019-10-16\", \"fullname\": \"auxiliary/scanner/http/thinvnc_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"ThinVNC Directory Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/thinvnc_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/thinvnc_traversal\", \"references\": [\"CVE-2019-17662\", \"URL-https://github.com/bewest/thinvnc/issues/5\", \"URL-https://github.com/shashankmangal2/Exploits/blob/master/ThinVNC-RemoteAccess/POC.py\", \"URL-https://redteamzone.com/ThinVNC/\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:52.981465Z"}