KomaMail Local Path Inclusion



EKU-ID: 1340 CVE: OSVDB-ID:
Author: SnakingMax Published: 2011-11-28 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


# Exploit Title: [KomaMail Local Path Inclusion]
 # Date: [26/11/2011]
 # Author: [SnakingMax]
 # WebSite: [snakingmax.blogspot.com]
 # Software Link: [http://www.koma-code.de/ProgsZip/KomaMail.zip]
 # Version: [3.82]
 # Category: [Local Exploit]
# Tested on: [Windows XP (SP3)]

# 0-Day Exploit
# Thanks to my family, girlfriend and friends.

#Exploit

# Go to "Create a new User" in the login panel
# and write a cool Username like this: ../../../../ProofOfConcept

#Go to File UserAccount.dat
../../../../ProofOfConcept

#Conclusion
#You can write and overwrite in the parent folders ussing Usernames like this.