CVE-2017-16806

Related Files

Ulterius Server File Download

Posted Aug 31, 2024

Authored by Rick Osgood, Jacob Robles | Site metasploit.com

This Metasploit module exploits a directory traversal vulnerability in Ulterius Server < v1.9.5.0 to download files from the affected host. A valid file path is needed to download a file. Fortunately, Ulterius indexes every file on the system, which can be stored in the following location: http://ulteriusURL:port/.../fileIndex.db. This Metasploit module can download and parse the fileIndex.db file. There is also an option to download a file using a provided path.

tags | exploit, web

advisories | CVE-2017-16806

SHA-256 | cd70f22598142588606027c73868f1ac64b24271fab3bf802b0942f783735576

Download | Favorite | View

Ulterius Server Directory Traversal

Posted Nov 15, 2017

Authored by Rick Osgood

Ulterius Server version prior to 1.9.5.0 suffer from a directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2017-16806

SHA-256 | 6cab2996d076aebf02646c924bcd8e6c8185e37ed027569c27bf457101d55e27

Download | Favorite | View