header-logo
Suggest Exploit
vendor:
phpTrafficA
by:
Unknown
7.5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: phpTrafficA
Affected Version From: 1.4.2001
Affected Version To: 1.4.2001
Patch Exists: NO
Related CWE: Unknown
CPE: a:phptraffic:phptraffica:1.4.1
Metasploit:
Other Scripts:
Platforms Tested:
Unknown

phpTrafficA Multiple Directory Traversal Vulnerabilities

The phpTrafficA application is prone to multiple directory-traversal vulnerabilities due to improper input sanitization. An attacker can exploit these vulnerabilities to retrieve arbitrary files from the affected system. This can lead to further attacks.

Mitigation:

It is recommended to sanitize user-supplied input to prevent directory-traversal attacks. Additionally, restricting access to sensitive files and directories can help mitigate the impact of these vulnerabilities.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/22655/info
 
phpTrafficA is prone to multiple directory-traversal vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid the attacker in further attacks.
 
phpTrafficA version 1.4.1 is vulnerable to these issues. 

http://www.example.com/phpTrafficA/banref.php?lang=/../../../../../../../../../etc/passwd%00

Navigation

Suggest Exploit

Services By CQR