CVE-2012-10061: Improper Limitation of a Pathname to a Restricted Directory

Sockso Music Host Server versions = 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote attackers to read arbitrary files from the server’s filesystem. The vulnerability exists in the HTTP interface on port 4444, where the endpoint /file/ fails to properly sanitize...

Sockso Music Host Server 1.5 Directory Traversal

This module exploits a directory traversal bug in Sockso on port 4444. This is done by using "../" in the path to retrieve a file on a vulnerable machine. Module Options msf use auxiliary/scanner/http/sockso/traversal msf undefinedtraversal show actions ...actions... msf undefinedtraversal set...