Create New Folder

This Folder contains the Supreme Galactica Informatica core dumps from life & beyond. Let ye threads be safe.
Aug 21
Permalink

Ever Popular Directory Traversal Vulnerabilities

Fujitsu Web-Based Admin View Directory Traversal Vulnerability

Version: 2.1.2 on Solaris, Other versions may vulnerable

Vulnerability: Directory Traversal
Risk: Critical

Description: Due to insufficient control of user inputs, Fujitsu Web-based admin view reveals content of files residing in folders other than webroot. This will allow an attacker to view arbitrary local files within the context of the web server.


Sample Request:

GET /.././.././.././.././.././.././.././.././.././etc/passwd HTTP/1.0

Host: target:8081

Comments (View)
blog comments powered by Disqus