Mobile USB Drive HD Multiple Local File Include and Arbitrary File Upload Vulnerabilities
BID:60847
Info
Mobile USB Drive HD Multiple Local File Include and Arbitrary File Upload Vulnerabilities
| Bugtraq ID: | 60847 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 28 2013 12:00AM |
| Updated: | Jun 28 2013 12:00AM |
| Credit: | Benjamin Kunz Mejri |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Mobile USB Drive HD Multiple Local File Include and Arbitrary File Upload Vulnerabilities
Mobile USB Drive HD is prone to multiple local file-include and arbitrary file-upload vulnerabilities because it fails to adequately validate files before uploading them.
An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context of the web server, and obtain sensitive information.
Mobile USB Drive HD 1.2 is vulnerable; other versions may also be affected.
Mobile USB Drive HD is prone to multiple local file-include and arbitrary file-upload vulnerabilities because it fails to adequately validate files before uploading them.
An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context of the web server, and obtain sensitive information.
Mobile USB Drive HD 1.2 is vulnerable; other versions may also be affected.
Exploit / POC
Mobile USB Drive HD Multiple Local File Include and Arbitrary File Upload Vulnerabilities
An attacker can exploit these issues using a web browser.
The following example data is available:
An attacker can exploit these issues using a web browser.
The following example data is available:
References
Mobile USB Drive HD Multiple Local File Include and Arbitrary File Upload Vulnerabilities
References:
References: