|
|
| |
KorWeblog is a weblog application used by many Korean Linux users.
A directory traversal vulnerability has been found in KorWeblog that allows a malicious user to map the directory structure on the server system. |
| |
Credit:
The information has been provided by SSR Team.
|
| |
Vulnerable Systems:
* KorWeblog version 1.3 and prior
An input validation error allows a malicious user to exploit this condition in order to map directory names on the server system. KorWeblog has a function to insert image icons when users post replies. This function is implemented in viewimg.php. The function doesn't check user input correctly, so malicious attackers can modify the $path variable and can get file lists of a target directory.
Example:
http://[victim]/viewimg.php?path=images.d/face/../../../../../../../&form=Com&var=faceicon
Patch Availability:
A patch for this vulnerability can be found at:
http://kldp.net/tracker/index.php?func=detail&aid=300515&group_id=13&atid=300013
|
|
|
