BOA Web Server LFI (CVE-2017-9833)

Exploits CVE-2017-9833 in BOA Web Server 0.94.14 common in IP cameras/DVRs: FILECAMERA traversal in /cgi-bin/wapopen reads arbitrary files as root. !/usr/bin/env python3 -- coding: utf-8 -- """BOA Web Server FILECAMERA LFI CVE-2017-9833.""" import re import urllib.parse from kittysploit import fr...

CVE-2017-9833: Improper Limitation of a Pathname to a Restricted Directory

/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges. NOTE: multiple third parties report that this is a system-integrator issue e.g., a vulnerability on one type of camera because Boa does not include any...