| netOffice Dwins Authentication Bypass Vulnerability and Arbitrary File Upload Vulnerability |
|
Credit:
| dB at rawsecurity.org discovered these issues. |
|
Vulnerable:
|
Luis Wang netOffice Dwins 1.3 p2
|
|
Description:
|
netOffice Dwins is prone to a vulnerability that allows attackers to bypass authentication as well as a vulnerability that allows attackers to upload arbitrary files. These issues occur because the application fails to adequately sanitize user-supplied input.
Attackers can leverage these issues to gain unauthorized access to the application and to execute arbitrary code in the context of the application.
These issues affect Dwins 1.3 p2; other versions may also be affected.
|
| Exploit:
|
Attackers may exploit these issues through a browser. The following proof-of-concept code is available: |
|
Solution:
| Currently SecuMania is not aware of any solution for this issue.
If you are aware of more recent information, please mail us at: vul[at]SecuMania.org. |
|
References:
|
|
Subscribe to this comment's feed
Show/Hide comments
Show/Hide comment form
visit website
http://netofficedwins
.sourceforge.net