0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
SoftArtisans SAFileUp 5.0.14 (viewsrc.asp) Script Source Disclosure
[=================================================================== SoftArtisans SAFileUp 5.0.14 (viewsrc.asp) Script Source Disclosure =================================================================== SoftArtisans FileUp viewsrc.asp remote script source disclosure exploit Advisory Name: SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit Tested and Confirmed Vulerable: SoftArtisans SAFileUp(TM) 5.0.14 (Standard) Severity: High Type: Script source disclosure From where: Remote Discovered by: Inge Henriksen Vendor Status: Notified Overview: SoftArtisans FileUp(TM) is a popular web server component for transactional uploading of files to a web server using a web browser. When installing SoftArtisans FileUp(TM) you should avoid installing the samples as viewsrc.asp can let remote anonymous users see script source code or configuration settings outside the /SAFileUpSamples virtual directory. This is accomplished by modifying the "path" query variable to point to files outside the designated directory. A web browser from a remote location is a sufficient tool to see the source code or configuration settings in plain text. Proof-of Concept: The following url would show the configuration settings for www.example.xom: http://www.example.xom/SAFileUpSamples/util/viewsrc.asp?path=/SAFileUpSamples/%c0%ae./%c0%ae./web.config The %c0%ae is Unicode for the "." character on a english language server, the url is therefore interpreted by the server as http://www.example.xom/SAFileUpSamples/util/viewsrc.asp?path=/SAFileUpSamples/../../web.config, in addition the unicode character avoids the security checks inside the code of viewsrc.asp which won't let any ".." pass through. Keep in mind that other unicode's will also work. Also note that OS'es with other language settings will be vulnerable to different unicodes, thus %c0%ae might not work on a chinese server but some other unicode's should work just as well. # 0day.today [2024-12-24] #