Exploit Corda Highwire - 'Highwire.ashx' Full Path Disclosure

[Exploiter]

EDB-ID

38653

Проверка EDB

1. Пройдено

Автор

ADAM WILLARD

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

N/A

Дата публикации

2013-07-12

Corda Highwire - 'Highwire.ashx' Full Path Disclosure

source: https://www.securityfocus.com/bid/61152/info

Corda Highwire is prone to a path disclosure vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to obtain sensitive information that may lead to further attacks. 

http://www.example.com/highwire.ashx?url=../../