The OpenID idp software "Barnraiser Prairie" suffers from a directory traversal vulnerability.
1ad81e02ee42a9511c7683f63d96e32a3ce1513c07afe374fd2a2aa94218d4d4The OpenID idp software "Barnraiser Prairie"
http://www.barnraiser.org/prairie/ is vulnerable to directory traversal attacks:
./get_file.php does not limit the given path and allows directory traversal attacks with full public access to all images on the server.
Example exploit:
get_file.php?avatar=..&width=../../../../../../../../usr/share/apache2/icons/apache_pb.png
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed