|
CitrusDB Arbitrary Local PHP File Include Vulnerability
No exploit is required. The following proof of concept is available: http://www.example.com/citrusdb/tools/index.php?load=../../../../../../tmp/exploit.php (exploit.php would be a malicious PHP script on the same computer) |
|
 Privacy Statement |
