Exploit phpTrafficA 1.4.1 - 'banref.php?lang' Traversal Local File Inclusion

Exploiter

Хакер
34,599
0
18 Дек 2022
EDB-ID
29626
Проверка EDB
  1. Пройдено
Автор
HAMID EBADI
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2007-1076
Дата публикации
2007-02-21
phpTrafficA 1.4.1 - 'banref.php?lang' Traversal Local File Inclusion
Код:
source: https://www.securityfocus.com/bid/22655/info
 
phpTrafficA is prone to multiple directory-traversal vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid the attacker in further attacks.
 
phpTrafficA version 1.4.1 is vulnerable to these issues. 

http://www.example.com/phpTrafficA/banref.php?lang=/../../../../../../../../../etc/passwd%00
 
Источник
www.exploit-db.com

Похожие темы