Exploit News Wizard 2.0 - Full Path Disclosure

[Exploiter]

EDB-ID

23012

Проверка EDB

1. Пройдено

Автор

G00DB0Y

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2003-08-11

source: https://www.securityfocus.com/bid/8389/info

News Wizard will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system.

http://www.example.com/path/nw/article.php?id='