exploit-db-mirror/exploits/multiple/remote/20234.txt
Offensive Security 36c084c351 DB: 2021-09-03
45419 changes to exploits/shellcodes

2 new exploits/shellcodes

Too many to list!
2021-09-03 13:39:06 +00:00

7 lines
No EOL
443 B
Text

source: https://www.securityfocus.com/bid/1704/info
A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variable request on port 8002 will enable a user to read any available file includeing credit card details, username, password etc.
For example:
http://target:8002/Newuser?Image=../../database/rbsserv.mdb