• info
• discussion
• exploit
• solution
• references

webSPELL CVE-2007-2368 Remote Security Vulnerability

webSPELL is prone to a remote security vulnerability. picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter.