Exploit GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure

[Exploiter]

EDB-ID

29282

Проверка EDB

1. Пройдено

Автор

MR_KALIMAN

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-6569

Дата публикации

2006-12-14

GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure

source: https://www.securityfocus.com/bid/21595/info

GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure vulnerabilities, an arbitrary file-upload vulnerability, and multiple cross-site scripting vulnerabilities.

An attacker can exploit these issues to upload and execute malicious PHP code in the context of the webserver process, to view sensitive information, and to steal cookie-based authentication credentials. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. Exploiting these issues may aid the attacker in further attacks.

Version 1.0 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/form.php?floap=modfich&do=[FILE]
http://www.example.com/form.php?floap=modfich&chem=[FILE]