PHPBoost – Arbitrary File Upload / Information Disclosure

• Exploit Database
• 115 阅读

• 作者： KedAns-Dz
  日期： 2013-03-11
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/38386/
• 1 2 3 4 5 6 7 8 9 10

  source: https://www.securityfocus.com/bid/58432/info   PHPBoost is prone to an information disclosure vulnerability and an arbitrary file-upload vulnerability because the application fails to adequately sanitize user-supplied input.   An attacker can exploit these issues to upload arbitrary files in the context of the web server process or gain access to sensitive information that may aid in further attacks.   PHPBoost 4.0 is vulnerable; other versions may also be affected.   http://www.example.com/phpboost/user/?url=/../../KedAns