=?iso-8859-1?Q?Daniel_Nystr=F6m?=
13/02/07, 11:50
Hello!
Miniwebsvr 0.0.6 suffers from a directory traversal flaw.
"Exploit" :
http://yoursite/..%00
Attack vector seems limited as you're only able to list one level down.
Cheers,
Daniel Nystr=F6m, daniel.nystrom@xored.net
Fredrik Wessberg, fredd3@hotmail.com
Miniwebsvr 0.0.6 suffers from a directory traversal flaw.
"Exploit" :
http://yoursite/..%00
Attack vector seems limited as you're only able to list one level down.
Cheers,
Daniel Nystr=F6m, daniel.nystrom@xored.net
Fredrik Wessberg, fredd3@hotmail.com