Exploit CGIScript.net csNews 1.0 - Header File Type Restriction Bypass

[Exploiter]

EDB-ID

21533

Проверка EDB

1. Пройдено

Автор

STEVE GUSTIN

Тип уязвимости

WEBAPPS

Платформа

CGI

CVE

cve-2002-0923

Дата публикации

2002-06-11

source: https://www.securityfocus.com/bid/4994/info

csNews is a script for managing news items on a website. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems.

It is possible for a malicious admin user to bypass file type restrictions on the header and footer file. This may result in arbitrary system files being displayed to remote users, and the disclosure of sensitive information.

The ability to exploit this vulnerability may only require "public" access to csNews if used in conjunction with issues discussed in BID 4993.

javascript:alert(document.form1.pheader.value='setup.cgi');