Exploit Sambar Server 5.1 - Script Source Disclosure

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
21390
Проверка EDB
  1. Пройдено
Автор
PGRUNDL
Тип уязвимости
REMOTE
Платформа
CGI
CVE
cve-2002-0737
Дата публикации
2002-04-17
Код:
source: https://www.securityfocus.com/bid/4533/info

An issue has been discovered in Sambar Server, which could allow a user to reveal the source code of script files.

Submitting a request for a known script file along with a space and null character (%00), will successfully bypass the serverside URL parsing. 

http://server/cgi-bin/environ.pl+%00
 
Источник
www.exploit-db.com

Похожие темы