Exploit Hosting Controller 7C - 'FolderManager.aspx' Directory Traversal

[Exploiter]

EDB-ID

29357

Проверка EDB

1. Пройдено

Автор

KAPDA

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

cve-2006-6814

Дата публикации

2006-12-27

Hosting Controller 7C - 'FolderManager.aspx' Directory Traversal

source: https://www.securityfocus.com/bid/21786/info

Hosting Controller is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to modify or retrieve arbitrary files in the context of the webserver process. This may aid in further attacks.

This issue affects version 7C; earlier versions may also be vulnerable.

http://www.example.com/FolderManager/FolderManager.aspx?BrowseLevel=1&BrowsePath=[SITE NORMAL PATH]\..\..\..\..\program%20files