Exploit Sambar Server 6.1 Beta 2 - 'showini.asp' Arbitrary File Access

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
24163
Проверка EDB
  1. Пройдено
Автор
OLIVER KAROW
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2004-2565
Дата публикации
2004-06-01
Код:
source: https://www.securityfocus.com/bid/10444/info
  
Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks.
  
These issues require an attacker to have administrative privileges, however, it is reported that an administrative password is not set on the server by default. An administrator who is not intended to have certain privileges may also exploit these vulnerabilities.
  
Sambar 6.1 Beta 2 is reported to be prone to these issues, however, it is likely that other versions are affected as well.

http://www.example.com/sysadmin/system/showini.asp?file=\..\..\..\..\..\..\..\boot.ini
 
Источник
www.exploit-db.com

Похожие темы