Exploit Social Media - 'index.php' Local File Inclusion

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
34383
Проверка EDB
  1. Пройдено
Автор
HARRI JOHANSSON
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
N/A
Дата публикации
2010-07-27
Social Media - 'index.php' Local File Inclusion
Код:
source: https://www.securityfocus.com/bid/42009/info

Social Media is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.

Social Media 2.0.0 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?view=../../../../../../../../../../../../../../../proc/self/environ%00
 
Источник
www.exploit-db.com

Похожие темы