Exploit Hosting Controller 1.x - DSNManager Directory Traversal

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
21455
Проверка EDB
  1. Пройдено
Автор
HDLKHA
Тип уязвимости
WEBAPPS
Платформа
ASP
CVE
cve-2002-0772
Дата публикации
2002-05-17
Код:
source: https://www.securityfocus.com/bid/4759/info

Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems.

The DSNManager script does not sufficiently filter dot-dot-slash (../) sequences from URL parameters, making it prone to directory traversal attacks. An attacker can exploit this condition to disclose the contents of arbitrary web-readable files or potentially add a DSN (Data Source Number) to an arbitrary directory. 

http://target/admin/dsn/dsnmanager.asp?DSNAction=ChangeRoot&RootName=D:\webspace\opendnsserver\targ
et\target.com\db\..\..\..\..\
 
Источник
www.exploit-db.com

Похожие темы