Webfroot Shoutbox 2.32 – ‘URI’ File Disclosure-安全小百科

Webfroot Shoutbox 2.32 – ‘URI’ File Disclosure

漏洞ID	1053910	漏洞类型
发布时间	2003-05-29	更新时间	2003-05-29
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22671

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7737/info

Shoutbox is prone to directory traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to URI parameters.

An attacker can exploit this vulnerability by manipulating the value of the affected 'conf' URI parameter to obtain any files readable by the web server.

http://blablabla.com/shoutbox.php?conf=../../../../../../../etc/passwd

相关推荐: Internet Explorer帧注入漏洞

Internet Explorer帧注入漏洞漏洞ID 1105621 漏洞类型未知发布时间 1999-11-30 更新时间 1999-11-30 CVE编号 CVE-1999-0869 CNNVD-ID CNNVD-199812-007 漏洞平台 Win…

文章版权归作者所有，未经允许请勿转载。

THE END