Working Resources BadBlue三重点斜线目录遍历漏洞

漏洞信息详情

Working Resources BadBlue三重点斜线目录遍历漏洞

漏洞简介

BadBlue 1.6.1之前版本存在目录遍历漏洞。远程攻击者借助URL中的..(修改..)读取任意文件。

漏洞公告

Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com .
@securityfocus.com>

参考网址

来源: BID
名称: 4179
链接:http://www.securityfocus.com/bid/4179

来源: XF
名称: badblue-dotdotdot-directory-traversal(8295)
链接:http://www.iss.net/security_center/static/8295.php

来源: BUGTRAQ
名称: 20020226 BadBlue Yet Another Directory Traversal
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=101474689126219&w=2

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享