Exploit Web4Future Portal Solutions - 'Arhiva.php' Directory Traversal

[Exploiter]

EDB-ID

26730

Проверка EDB

1. Пройдено

Автор

R0T

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2005-4039

Дата публикации

2005-12-05

source: https://www.securityfocus.com/bid/15718/info

Portal Solutions is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input.

This issue may be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences to disclose arbitrary files. 

http://www.example.com/arhiva.php?dir=../