EDB-8256
functionalSysax Multi Server 4.3 - Arbitrary Delete Files Expoit
view exploit source exploit_dbverifiedtype remoteauthor Jonathan Salwanpublished 2009-03-23catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2009-4800US | medium4.0 | Exploit | ||
Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command. | ||||
| CVE-2009-4790US | high9.0 | Exploit | ||
Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands. NOTE: the prove… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan