← back
CVE-2007-5253

CVE-2007-5253

EPSS 8.9%
c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file extension, as demonstrated by a request for a ".txt%00.gif" file. NOTE: this might be a directory traversal vulnerability.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/30639/unverifiedexploitdbwww.exploit-db.com/exploits/30639unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/38580http://secunia.com/advisories/27061http://securityreason.com/securityalert/3194https://exchange.xforce.ibmcloud.com/vulnerabilities/36954https://www.exploit-db.com/exploits/30639/http://www.cart32.com/whatsnew.asphttp://www.security-assessment.com/files/advisories/2007-10-04_Cart32_Arbitrary_File_Download.pdfhttp://www.securityfocus.com/archive/1/481489/100/0/threadedhttp://www.securityfocus.com/bid/25928