Timeline for Danger of Path Traversal Attacks
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 9, 2012 at 2:35 | comment | added | Novice User | M : I'm assuming that the website is vulnerable in public domain, like xxxx.com/index.php?file=/etc/passwd , now the bad guy really needs to be part of the VPN to exploit the system to the fullest. Am I getting anything wrong ? | |
| May 8, 2012 at 19:01 | comment | added | Safado | If the server is only accessible from the VPN, isn't it safe to assume then that if the attacker is gathering this information he's in the VPN as well? | |
| May 8, 2012 at 17:13 | comment | added | Novice User | Even if /etc/shadow is visible, Lets assume he is able to retrieve the password, but how can he login to the server, when the Server can only be accessed inside VPN ? | |
| May 8, 2012 at 16:35 | history | answered | Safado | CC BY-SA 3.0 |