[Gnump3d-users] Security: HUGE security hole

[Boris Kurktchiev]

Ok didn't expect this but I just finished running a nessus scan on my machine 
and it came back with one of the most infamous holes ever in gnump3d if you 
do: http://localhost:8888../../../../../../etc/passwd it displays the 
file.... thats BAD. The report also said that the server is vulnerable to jsp 
scrip execution like this:
http://localhost:8888/<SCRIPT>alert('Vulnerable')</SCRIPT>.jsp
but I couldn't get this to work. PLEASE fix the first hole though.