W-Agora 4.1.6 – ‘index.php?bn’ Traversal Arbitrary File Access

漏洞ID	1053690	漏洞类型
发布时间	2003-01-13	更新时间	2003-01-13
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22149

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/6595/info

A file disclosure vulnerability has been reported for W-Agora. It has been reported that W-Agora does not adequately sanitize some user-supplied input.

An attacker can construct a URL consisting of dot-dot-slash (../) character sequences to obtain access to files outside of the document root. It should be noted that only files accessible by the web server will be disclosed to the attacker. 

http://target/index.php?site=demos&bn=../../../../../../../../../../etc/passwd%00

相关推荐: Lucent Orinoco Closed Network Unauthorized Access Vulnerability

Lucent Orinoco Closed Network Unauthorized Access Vulnerability 漏洞ID 1103375 漏洞类型 Design Error 发布时间 2001-04-02 更新时间 2001-04-02 CVE…