Webfroot Shoutbox 2.32 URI Parameter File Disclosure Vulnerability

2003-05-29T00:00:00
ID EDB-ID:22671
Type exploitdb
Reporter pokleyzz
Modified 2003-05-29T00:00:00

Description

Webfroot Shoutbox 2.32 URI Parameter File Disclosure Vulnerability. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/7737/info

Shoutbox is prone to directory traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to URI parameters.

An attacker can exploit this vulnerability by manipulating the value of the affected 'conf' URI parameter to obtain any files readable by the web server.

http://blablabla.com/shoutbox.php?conf=../../../../../../../etc/passwd