HTTP Explorer Web Server目录遍历漏洞

HTTP Explorer Web Server是一款WEB应用程序。 HTTP Explorer Web Server不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看文件内容。 提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看文件内容。 HTTP Explorer Web Server 1.02 目前没有解决方案提供： http://http-explorer.sourceforge.net/ http://www.example.com/../../../../...

Http explorer Web Server 1.02 - Directory Traversal

Http explorer Web Server 1.02 - Directory Traversal Http explorer Web Server 1.02 Directory Transversal Vulnerability http://sourceforge.net/projects/http-explorer/ Test: http://site/../../../../ || http://site/../ /str0ke use LWP::Simple; use strict; sub usage print "Http explorer Web Server 1.0...

Http explorer Web Server 1.02 Directory Transversal Vulnerability

Exploit for unknown platform in category remote exploits ================================================================= Http explorer Web Server 1.02 Directory Transversal Vulnerability ================================================================= Http explorer Web Server 1.02 Directory...