0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Perl script jsupload.cgi.pl 0.6.4 Directory Traversal
[------------------------------------------------------------------------------------------------------------- Directory traversal vulnerabilities in jsupload.cgi.pl version 0.6.4 and before 29 November 2012 Sean de Regge (seanderegge gmail.com) ------------------------------------------------------------------------------------------------------------- Details: ---------- Versions of the Perl script jsupload.cgi.pl prior to version number 0.6.4 are vulnerable to directory traversal attacks. The script allows a remote user to upload a file to the "/tmp/uploader" directory. However, by adding the characters ../ when supplying a filename it is possible to break out of the directory and write to other directories on the system. A similar vulnerability exists in the code that allows a user to download files from the "/tmp/uploader" directory. A detailed writup of this vulnerability can be found at www.pwnani.com. Recommendation: ------------------------- The latest version of the script includes a patch for these vulnerabilities and can be found at: http://code.google.com/p/gwtupload/source/browse/jsupload/src/main/java/jsupload/public/jsupload.cgi.pl # 0day.today [2024-11-16] #