| 标题 | iSharer and upRedSun File Sharing Wizard 1.5.0 Denial of Service |
|---|
| 描述 | A vulnerability was found in File Sharing Wizard 1.5.0 and classified as problematic. Affected is the processing of data via the web server's GET method.
The lack of limitation, processing and manipulation of data sent through the GET method leads to denial of service.
The attack can be launched remotely. Additionally, there is an exploit available from the best and most trusted expoits repositories:
https://cxsecurity.com/issue/WLB-2024010023
Server vulnerable: https://drive.google.com/file/d/13fs9IHSaGQ27YIQNDyrQV20jCT7owPQ6/view?usp=sharing
Exploit: https://drive.google.com/file/d/1_ZXyz1tp9KD_VmCVRY566YhxhRX-xeSE/view?usp=sharing
Vídeo PoC: https://www.youtube.com/watch?v=WK7xK9KHiMU
|
|---|
| 来源 | ⚠️ https://www.youtube.com/watch?v=WK7xK9KHiMU |
|---|
| 用户 | fernando.mengali (UID 60856) |
|---|
| 提交 | 2024-01-08 16時50分 (3 年前) |
|---|
| 管理 | 2024-01-11 11時28分 (3 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 250438 [iSharer and upRedSun File Sharing Wizard 直到 1.5.0 GET Request 拒绝服务] |
|---|
| 积分 | 17 |
|---|