dr_insane has discovered two vulnerabilities in ShowOff! Digital Media Software, which can be exploited by malicious people to cause a DoS (Denial of Service) and disclose sensitive information.

1) An input validation error in the request handling can be exploited disclose the content of arbitrary files via directory traversal attacks.

Examples:
http://[host]/ShowAlbum?ShowDetails&1&nocount&/../../../../../../../../../../[file]
http://[host]/ShowVideo?1&fullnocount&/../../../../../../../../../../[file]
http://[host]/ShowGraphic?/../../../../../../../../[file]

2) An error in the communication handling can be exploited to crash a vulnerable service by sending a specially crafted malformed request to port 8083.

Successful exploitation requires that file uploads are enabled (not enabled in the default settings).

The vulnerabilities have been confirmed in version 1.5.4. Other versions may also be affected.

Solution
1) Filter character sequences in a proxy server or firewall with URL filtering capabilities.
Further details available in Customer Area

Provided and/or discovered by
dr_insane

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area