Exploit Wabbit PHP Gallery 0.9 - 'Dir' Directory Traversal

[Exploiter]

EDB-ID

29145

Проверка EDB

1. Пройдено

Автор

THE_EDIT0R

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-6185

Дата публикации

2006-11-20

source: https://www.securityfocus.com/bid/21213/info

Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to retrieve the contents of arbitrary files in the context of the webserver process. Information obtained may aid in further attacks.

http://www.example.com/index.php?dir=../../../../../../etc/passwd