Exploit Miva htmlscript 2.x - Directory Traversal

[Exploiter]

EDB-ID

20434

Проверка EDB

1. Пройдено

Автор

DENNIS MOORE

Тип уязвимости

REMOTE

Платформа

CGI

CVE

cve-1999-0264

Дата публикации

1998-01-26

source: https://www.securityfocus.com/bid/2001/info

Miva's htmlscript CGI program provides a unique scripting language with HTML type tags. (Note that htmlscript is an older product no longer distributed by Miva under that name.) Versions of the htmlscript interpreter (a CGI script) prior to 2.9932 are vulnerable to a file reading directory traversal attack using relative paths (eg., "../../../../../../etc/passwd"). An attacker need only append this path as a variable passed to the script via a URL. The contents of any file to which the web server process has read access can be retrieved using this method. 

http://host/cgi-bin/htmlscript?../../../../../../../etc/somefile