"Just did a quick google and tried that on a couple of sites but no link appeared. Does this require authentication??"
Sorry I should have mentioned that It only seems to work on version 6.5
And I wrote User.Lang but it should have been User.lang
In Google I go for inurl:servlet/webacc and
I think maybe you’re seeing the
directory traversal vulnerability identified in Groupwise. Groupwise 6
had this vulnerability as well as previous versions if I remember right.
http://xforce.iss.net/xforce/xfdb/7287
Thanks,
Michael Horseman
IT Security Analyst
Capgemini
[EMAIL PR
Hi,
> It seems that this is working on almost every webacces server
Just did a quick google and tried that on a couple of sites but no link
appeared. Does this require authentication??
Cheers,
DanB UK.
DanB UK
London, UK.
___
Full-Disclosure - We beli
