info
discussion
exploit
solution
references
Simplog Information Disclosure Vulnerability
An exploit is not required.
Example URIs were provided:
http://www.example.com/index.php?act=blog&blogid=../somefile
http://www.example.com/index.php?act=../somefile
Privacy Statement
Copyright 2010, SecurityFocus