WebGlimpse 2.x – ‘wgarcmin.cgi’ Full Path Disclosure

  • 作者: Websecurity
    日期: 2012-03-18
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/36976/
  • source: https://www.securityfocus.com/bid/52646/info
    
    WebGlimpse is prone to a path-disclosure vulnerability.
    
    Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer.
    
    WebGlimpse 2.18.7 is vulnerable; other versions may also be affected. 
    
    http://www.example.com/wgarcmin.cgi?NEXTPAGE=D&ID=1&DOC=1