BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure Jun 08 2006 09:18AM
gmdarkfig gmail com
// Script

Web -------- www.npds.org

versions --- NPDS <= 5.10

Solutions -- None official

Note ------- Vendor has been contacted

// Local Inclusion

http://[...]/header.php?Default_Theme=../apache/logs/error.log%00

http://[...]/modules/cluster-paradise/cluster-E.php?ModPath=../../../../
../apa...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus